[keycloak-user] keycloak-gatekeeper + fine-grained authorization

I'm trying to figure out how to use keycloak-gatekeeper with the fine-grained authorization option in Keycloak. I set up the authorization and ran an evaluation within the Keycloak UI that correctly gave DENY for user 'test', but when I use that same user to log in through gatekeeper, it says it's permitted and directs me to upstream. Is there anything I need to enable on gatekeeper side to have it enforce, or any pointers here? Thanks, Tyler