Openjdk: Keystore load on SunPKCS11/nss-db not seeing changes in JVM runtime

Issue

scenario:

1) create a nssdb using:

   certutil -d <path> -N

2) add there some stuff using certutil, for example:

    certutil -S -k rsa -g 2048 -n cacert1 -s "CN=cacert1" -v 120 -d . -t "C,C,C" -x

3) try to get the list of nss-db available aliases.

4) on another terminal, add or remove some stuff in nss-db

5) type something in first terminal to make a new loop and call keystore.load() again in same JVM runtime
=> the changes are not displayed, although Keystore.load() doc says it should.