[keycloak-user] Requires uma_protection scope