[keycloak-user] Mod_auth_openidc vs keycloak proxy