[keycloak-user] policy enforcer without content path