[keycloak-user] X-509 Client certificate thumbprint authentication