Override this if you need to request custom scopes (i.e. those not in the basic OA4MP specification) for a server.
This returns a blank delimited list of scopes, e.g. "openid email profile". Note that if you
override this method, the openid scope must always be included or the server will refuse to service the request.
The basic operation is to take the basic scopes for the OA4MP OIDC spec and add any that are specified in the
configuration file in the "scopes" element.
public void preRequestCert(Asset asset,
This should only be invoked during a manual test by setting the MANUAL_TEST flag to true. it will print out
interim results from the getCert call which can then be cut and pasted into a curl call. This is intended to be
a low-level debugging aid and if this test flag is enabled, then the client will be unable to actually get a cert.