Wow, Jürgen this is outstanding work. The internet is a beautiful place thank you so much for taking the time to reply and explain the steps you took.
I don't use 2fa or tws so your experience gives me motivation for the gateway. I had seen a similar suggestion on stack overflow regarding adding the openfx paths to the Java exec. I had some hunches where to trial and error in the shell script so your results are time-saving.
I also saw another suggestion to do something like a symbolic link between the default-jre (/usr/bin) Java and openjfk ( /lib something I forget).
Can't wait to get back to the office and try these ideas out. Cheers and happy holidays.