Keycloak integration

Are there any endpoints that should *not* be secured?