The keycloak app uses some UCR variables. For me it was surprising, that they have the scheme keycloak/*/* kc/db/* That should be adjusted.
Apart from the inconsistent naming: Please do not confuse App settings and UCR variables. App settings may also be represented by UCR variables, but may not be used as such - Changing an App Settings UCR representation will not trigger the configuration associated with modifying the App setting.