Let's make the protection of this route an option. If it weren't optional, it would mean that you must run keycloak as part of a local dev environment which doesn't make much sense