[keycloak-user] missing autodetect-bearer-only from secure-deployment xsd?