keytool -help prints out very long usage instructions that are more likely to intimidate users than help them. One suggestion courtesy of ###@###.### was to have "keytool -help" list only the commands (without their options) and then have a "keytool -help command" that lists the details.

In other words, something roughly like:

% keytool -help
Usage:
  keytool <command> <options>

Valid commands are:
  -certreq, -list, ...

Type "keytool -help <command>" for more information about a command.
% keytool -help list
Usage:
keytool -list [-v | -rfc] [-protected]
             [-alias <alias>]
             [-keystore <keystore>] [-storepass <storepass>]
             [-storetype <storetype>] [-providername <name>]
             [-providerclass <provider_class_name> [-providerarg <arg>]] ...
             [-providerpath <pathlist>]