Good morning,

Did you think in the alternatives:

+ a config file
+ CF Environment variables

If you connect with PWS or Bluemix, you are using

https://login.run.pivotal.io
https://login.eu-gb.bluemix.net/UAALoginServerWAR

so your application use a https connection from your apps to UAA and your data send in a secure way.

What is the problem from your point of view?

Juan Antonio