As an alternative, SCEP just provides the use of a shared secret, which should be client-specific and used only once.
Alternatively, SCEP provides access to a communal secret that should be unique to each client and used just one time.