[keycloak-user] Best practice for database access in a keycloak custom provider?