How does this update authentication flows?

[xgp]

Hi all! Very excited to see this under the direction of Keycloak maintainers.

Question about the behavior of updating authentication flows. One of the major problems we have with the keycloak-config-cli is how it does the create-switch when updating an authentication flow. We've experienced partial apply problems that lead to a broken state in the realm we're applying it.

I've read through the code a bit here, but I couldn't figure out (sorry, not a go expert) how this handles the same use case of updating a (potentially large and complex) authentication flow, and what testing has been done in that regard. Can anybody give a quick summary of how that works here?