[keycloak-user] Authentication SPI and connection management