[keycloak-user] Access token customization per client