I have written a KIP describing the API additions needed to kafka-storage to store SCRAM credentials at bootstrap time. Please take a look at https://cwiki.apache.org/confluence/display/KAFKA/KIP-900%3A+KRaft+kafka-storage.sh+API+additions+to+support+SCRAM+for+Kafka+Brokers
-- --Proven