Follow-up on #24112 .

This is follow-up task for add documentation in order for clients to be able to handle "authentication expired" error sent from Keycloak.