Dumb and simple, get OpenAM's test cert as JSON Web Key