always set signing_dir

keystoneclient tries to create the directory if it does not exist and the default is ~/keystone-signing