[keycloak-user] Forced password change for service accounts