[keycloak-user] Authorization resource SPI