The public keystore holds a subset of the principal structure from the PkiArmoury:
<pre>
 principal( #name, public_key )
</pre>

In particular, it has only the public key, and the services need to make use of them.