[keycloak-user] How to get specific client role programmatically