KEYCLOAK-421 Set realm admin apps to bearer-only

services/src/main/java/org/keycloak/services/managers/RealmManager.java

@@ -208,6 +208,7 @@ public class RealmManager {
         ApplicationManager applicationManager = new ApplicationManager(new RealmManager(identitySession));
 
         ApplicationModel realmAdminApp = applicationManager.createApplication(adminRealm, realm.getName() + "-realm");
+        realmAdminApp.setBearerOnly(true);
         realm.setAdminApp(realmAdminApp);
 
         for (String r : AdminRoles.ALL_REALM_ROLES) {