[keycloak-user] Securing backend rest methods