A new option `-providerPath` has been added to `jarsigner`. One can use this option to specify the class path of an alternate keystore implementation. It can be used together with the `-providerClass` option.