[keycloak-user] Duplicate ldap groups during group sync