checkpoint for keystone auth