[Apiman-user] Keycloak client access limitations