What

When provisioning a shared service, we should create a new user in the Keycloak instance that only has access to the realm specified. This is the user we should then place in the keycloak secret within that namespace.

When deproivisioning, this user should be removed from keycloak.