[keycloak-user] add self signed certificate for external IDP without root acces