[keycloak-user] Having a policy enforcer and an unsecured endpoint at the same time ?