Is this method invoked automatically by keycloak when authentication is performed or we need to explicitly call this when we want to add the RequiredAction? For me, it is not being invoked automatically by keycloak which I first thought was the case. Could you please explain this in more detail on how this exactly works?