[keycloak-user] use JBoss/Javaadapter to verify both realm and client roles