Dear ca-certificates-java maintainer,

I would like to propose a simple feature for
/usr/share/ca-certificates-java/ca-certificates-java.jar.

I'd like a new flag to override the hadcoded /etc/ssl/certs/java/cacerts
so I can run the the program on whatever set of certificates I want to.

My use case here is exactly to run this on a .debian.org system, where
the system's ca store only contains Debian's own CA and the Let's
Encrypt root, nothing else.  I would want to run this on "ca-global" (I
suppose I would have to create a useful stdin for
ca-certificates-java.jar, but that's doable; though it would be awesome
if it also learnt to just crawl a directory…) and then save the
generated JKS someplaces I have write access to.

Thanks for considering!