[keycloak-user] Keycloak is now OpenID Connect certified