[keycloak-user] custom user attribute access in JS policies