The current tiger (and now mustang) documentation does not explain how
the new 1.5 Keystore features are put together (Builders, ProtectionParameters,
KeyEntries, etc), except at the API level. This architecture
is difficult for a new user to parse & understand the various relationships,
and should be updated with documentation and examples. The only mention
we have is currently in JSSE and the PKCS11 docs, but only a passing mention.