Unsufficient TRACE messages in Keystore realm + properties realm

When troubleshotting CLIENT-CERT, there is no info from keystore-realm, why was certificate rejected.
Similar problem in properties realm used as authorzation realm - at least TRACE with principal which was tried to be obtained from realm is necessary.