[keycloak-dev] Verify access token when using SPI