What

remove the label service instance task from the keycloak APB. add a label to the secret we create as part of the provision

Why

It is not good practice to be labeling the service intance. Also in later versions of OSCP it seems to cause permission problems.