Update rules around generating keystone admin