[keycloak-user] Token validation and public client