Further secure the admin interface

[bickelj]

At https://www.keycloak.org/server/reverseproxy it says:

Exposed admin paths lead to an unnecessary attack vector.

One idea is for each administrator to create a key and self-signed client certificate, require client certificates for /admin/ paths in nginx configuration, and add those self-signed certificates to the nginx trusted certificate list.