Update policy-keystore with newer certificates