[keycloak-user] Strange behavior related to LDAP groups / subgroups