[keycloak-user] password history not always correctly considered