[keycloak-user] Adding a rules based authorization policy to keycloak - help?