openstack-db: support updating keystone sql passwords

keystone uses connection= rather than sql_connection=