[keycloak-user] create custom policy provider