Run db_sync as keystone user, or it produces root-owned log files