Hi Carl,
Currently I can't think of straight functionality in the Gluu server that can fulfill these stuff. `scim-rp-openid-keys.json` is intended to be utilized by `SCIM-Client` which is tied to a pre-registered RP client. Maybe you can encrypt/decrypt `scim-rp-openid-keys.json` to your own needs with which you are welcome to try.
Regards,
Val