[keycloak-user] enable/disable permissions via the Java API