The engineLoad(LoadStoreParameter) method of the PKCS11 KeyStore does not accept parameters of type CallbackHandlerProtection. This is an issue in particular when a PKCS11 KeyStore is to be used with the KeyStore.Builder API. In that usage scenario, no convenient workaround is available.