NTS: config and initialization

[Daniel Franke]

I recommend having no default at all for the trust store location and
forcing to be set in the config file. Too much risk otherwise of
finding something that looks like a store but isn't actually
trustworthy and entering an insecure state without the user realizing
it. Leave it up to packagers to pre-populate the default config with
the location of the distro's trust store.