I like Keyloack, but omg it's ridiculously difficult when using the docker container to import a CA cert. May Java Keystore burn in hell.