I think it would be nice to move authentication backend demo  from Picketlink to Keycloak. There is actually a similar demo in Keycloak repo . I notice some issue with Picketlink when deploying to openshift with jbossas-7 cartridge.
I guess AGSEC might be the JIRA project for that. Is it ok to create a jira there?