[keycloak-user] KeycloakConfigResolver vs. unprotected resources