The password scrambler utility provides a mechanism for masking the keyring password that is stored in the configuration file.
The sample JCL CTGSSLPW provides an example of how to run this utility to generate a keyringpw configuration line that can be copied into the configuration file.