When deploying EAP using SSO the deployment-scanner is configured with the auto-deploy-exploded attribute to true.
Then the applications are unzipped so that the web.xml is modified to be able to integrate with KEYCLOAK.

The problem is that exploded applications seem to use the deployment folder as virtual filesystem so any change in these files causes a redeployment.