ensure that only one node is set for the keystone-server role

this change depends on crowbar/barclamp-crowbar#782