[keycloak-user] Is Keycloak ONLY for securing URL based Calls