[keycloak-user] Host header verification during introspect?