Vault-keycloak oidc

Continuing the discussion from Manage groups for oidc authentication: