Exclusions according to Keycloak