Figured it out - the jhid-client-creds-helper has a different command that adds the

--scope openid 

flag to the end of the command. This worked and let me obtain an access token.