anchor.diff:  The below sections refer to single Keycloak _realm_ created in Keycloak server ${version.org.keycloak} for the purpose
   of Fuse 7 Security/Keycloak quickstarts.
   
  -The keycloak server is running using standard distribution with shifed ports:
  +The keycloak server is running using standard distribution with shifted ports:
   [listing,options="nowrap"]
   ----
   $ bin/standalone.sh -Djboss.socket.binding.port-offset=100 --debug 5006
  
positive.code: 
  `mvn:org.jboss.fuse.quickstarts.security/keycloak-httpservice-blueprint/<version>` is an example
  where servlets are still registered using HTTP Service (and its pax-web extension), but using Blueprint
  XML descriptor. The bundle embedds `/WEB-INF/keycloak.json`:
  [source,json,options="nowrap"]
  ----
  {
  
negative.code: Now, pax-web-undertow will look for `io.undertow.servlet.ServletExtension` which is now exposed by
  `mvn:org.keycloak/keycloak-pax-web-undertow/${version.org.keycloak}` fragment bundle.
  
  Now, after changing login configuration in `web.xml` to:
  [source,xml,options="nowrap"]
  ----
  <login-config>
  