Right now it's possible to easily find out that we're using keycloak by visiting the /auth URL. It's also possible to get to the admin screen. We need to change the URL or put this behind a HTTP basic auth.