[keycloak-user] Custom Identity Brokering and First login flow: prevent username edition?