Add a new attribute named "keystore.service" to the OAuth Service Profile, and set the value to the service instance you defined previously, for example "oauth-xyz-keystore.db."