The public keystore holds a subset of the principal structure from the PkiArmoury:

principal( #name, public_key )

In particular, it has only the public key, and the services need to make use of them.