[keycloak-user] Fine-grained enough for local group admins?