8168861: AnchorCertificates uses hardcoded password for cacerts keystore
Reviewed-by: vinnie, mullan

8165101: AnchorCertificates throws NPE when cacerts file not found
Reviewed-by: mullan

8140422: Add mechanism to allow non default root CAs to be not subject to algorithm restrictions
Reviewed-by: mullan, xuelei