alice: Spring's default JwtGrantedAuthoritiesConverter -> [SCOPE_email, SCOPE_profile]
alice: KeycloakJwtConverter roles                      -> [ROLE_user]
bob: Spring's default JwtGrantedAuthoritiesConverter -> [SCOPE_email, SCOPE_profile]
bob: KeycloakJwtConverter roles                      -> [ROLE_admin, ROLE_spring-api:reports-write, ROLE_user]