- Token URL uses internal Docker hostname - openremote-keycloak-1 not resolvable from host - Status: BLOCKED (fix later)