retune keycloak configuration, integrate custodian-internal

• integrate custodian-internal
• If possible, use for the key/cert pair only the Issuer: / CN=testing.swisscustodian.ch, for all namespaces
• add users as described in #77 (closed), alice, bob, charlie, david, eve... Sybil - requires init scripts (?)
• this should be fixing issue #98 (closed) - this fixes #98 (closed); everything worked but rsa key initialisation requires init scripts (?)
• also it proves that #100 & #102 are implemented (or not?)