expose keystone ports and run