[keycloak-user] Authorization question (maybe not keycloak?)