based on observations in https://github.com/nginx/kubernetes-ingress/issues/7074, use UI flow with keycloak