make ha work more betterer

- search for keystone-api instead of keystone role
- different haproxy options depending on back end
- restart keystone on any kind of failover scenario