investigate whether an IO stream should be closed:

---------------------------------------------

sun.security.provider.JavaKeyStore

    public void engineLoad(InputStream stream, char[] password)
        throws IOException, NoSuchAlgorithmException, CertificateException
    {
...
            if (password != null) {
                md = getPreKeyedHash(password);
                dis = new DataInputStream(new DigestInputStream(stream, md));
            } else {
                dis = new DataInputStream(stream);
            }
    }

    public void engineStore(OutputStream stream, char[] password)
        throws IOException, NoSuchAlgorithmException, CertificateException
    {
...
            DataOutputStream dos
                = new DataOutputStream(new DigestOutputStream(stream, md));
    }