File existence disclosure via unrestricted keystore paths

Path traversal in Red Hat build of Keycloak allows remote authenticated users with manage-realm rights to probe server file paths. The key provider component accepts an arbitrary keystore filesystem path without restricting resolution to an approved directory, exposing whether the Keycloak process can find and read the target. Exploitation requires a realm administrator with the high-privilege manage-realm role; it reveals path existence and readability, not file contents or modification.