Setting up Keycloak for a multi-tenant app