IdP v4.1 & OIDC keys

[John C. Pfeifer]

I am starting to configure OIDC OP on Shib 4.1 and have a question concerning the JWK key files used by OIDC. Can these files be encrypted (or, at least, the private key portion)? Am I better off making a set of encrypted X509 keys and loading the with a BasicX509CredentialFactoryBean? Or is there some other path I should be going down?

//
John Pfeifer
Division of Information Technology
University of Maryland, College Park