More than one proxy keystone endpoints

We're doing some POC activities around a swift cluster before we build it out. I've built a small openstack cluster with keystone on one node, and the swift proxy and storage on another node. I'm trying to add a new proxy to test SSL and S3 compatibility.

I've followed the instructions for adding a new proxy server, and if I use tempauth I can get it to work and I can see my containers and objects using swift -A <new proxy URL> list. If I use cyberduck I can view my objects and containers if I use the keystone authentication URL.

My question is how do I make keystone aware of the new proxy? I would think I'd need to add a new endpoint for the new proxy in keystone, but I haven't seen any instructions that you need to do that. If I use keystone auth on the new proxy and attempt to access it via swift -A <new proxy URL> -u tenant:user -K password list I get a 401 unauthorized error. So I'm not sure what I'm doing wrong.