Noticed that we have JKS/PKCS12 support in `cert-manager` but only PKCS12 support in `trust-manager`. Could the same options be ported over? Thanks!