Moodle OAuth2 (OpenID Connect) and Keycloak: Bi-directional profile updates