[keycloak-user] Securing Pentaho in Tomcat