Refactor the effective trust store construction mechanism to pick up certificate updates on the fly

[andreeaharmonic]

If an existing alias is reassociated with a different certificate, such changes do not get picked up by running channels. Updates to certificates in the Web UI currently require a re-deploy of affected channels, albeit with no other changes (just right click + deploy on a currently running channel).

The following actions also do not trigger a certificate update on running channels:
Pause -> Start
Stop -> Start