use keystone-api role in searches to pick up vips if provided