Keycloak integration

This is to avoid having a @SecurityDomain("keycloak") on all "boundary" classes.