[keycloak-user] role-ldap-mapper oddities