...
Each Plugin has its own "trust store" where the PGP certificates for that plugin are stored. This is a file which makes up part of installation and located at %{idp.home}/credentials/pluginid/truststore.asc. This is a The trust store is a text file which should contain one or more contain multiple `PGP PUBLIC KEY BLOCK ` sections . (For for example the one here). The trust store is located at %{idp.home}/credentials/pluginid/truststore.asc.
Having a separate trust store for each plugin ensures that trust cannot "leak" from one plugin to another,
...