[keycloak-user] Keeping JWT fields after token exchange