Add ability to enable Keystone PKI signing

I have updated the keystone configuration to allow users to enable PKI signing.  By default it is turned off.  In order to enable it you just need to set node["keystone"]["signing"] to "pki".