We call the role "keystone" and not "keystone-api"