[keycloak-dev] ClientModel.get/setAllowedClaimsMask