[Apiman-user] Securing back-end API endpoints with keycloak renders apis inaccessible via Apiman