anchor.diff:  [source]
   ----
   <subsystem xmlns="urn:jboss:domain:keycloak:1.1">
  -  <secure-deployment name="kie-wb-6.4.0-Final.war">
  +  <secure-deployment name="kie-wb-x.y.z.Final.war">
       <realm>demo</realm>
       <realm-public-key>MIIBIjANBgkqhkiG9w0BAQEFAAOCA...</realm-public-key>
       <auth-server-url>http://localhost:8180/auth</auth-server-url>
  
positive.code: 
  [source]
  ----
  curl -H "Authorization: bearer $TOKEN" http://localhost:8080/kie-wb-6.4.0.Final/rest/repositories
  ----
  
negative.code: * Root URL: _http://localhost:8280/_
  * Client protocol: _openid-connect_
  * Access type: _confidential_ ( or _public_ if you want so, but not recommended for production environments)
  * Valid redirect URIs: _/kie-server-x.y.z.Final/*_
  * Base URL: _/kie-server-x.y.z.Final_
  
  In this example the _admin_ user already created on previous steps is the one used for the client requests.
  So ensure that the _admin_ user is member of the role _kie-server_ in order to use the execution server's remote services.
  