[keycloak-user] Facebook "picture" / additional scopes access