[keycloak-user] OpenID Connect: userkey instead of username