[keycloak-user] Role-Based Policy with nodejs adapter, single role validation