Change sample policy files to use policy language

The sample policy files were using the old style for rules.

This changes the policy files to use the new policy language
for rules.

Change-Id: I532b941c9b14b68b449e2cd7165d01a1f1031b05
Closes-Bug: #1152662
use different bind addresses for admin and public

Keystone supports configuration of an admin_port and a public_port.
Applications may well want the admin port to be open on a different private network.
This patch change single bind_host to public_bind_host and admin_bind_host in the configuration.

DocImpact

Change-Id: Ic91aade987724c8f7c9276ca94e27681ae590662
Closes-Bug: #1035326
test attribute update edge cases

Change-Id: Iba21cd6587e1740cbede645b146ca206d9acd821
Merge "Change sample policy files to use policy language"
Merge "test attribute update edge cases"
Merge "use different bind addresses for admin and public"