This is to sync or move policy-enforcer from keycloak to keycloak-client . For policy-enforcer, I wonder if we can completely move it from Keycloak repository to keycloak-client repository? As it seems that it is not extensively needed in the Keycloak testsuite, so possibly can be moved together with all the tests (ClaimInformationPointProviderTest, EnforcerConfigTest , PolicyEnforcerTest, PolicyEnforcerClaimsTest. It seems the AuthzClientCredentialsTest can be possibly refactored to not use policy-enforcer as it uses it just for easier setup of authorization client).

This is to be investigated whether to move entirely or sync in similar way like keycloak-admin-client and keycloak-authz-client.