Mark password config options with secret

Config object supports masking values when writing out if the secret
flag is set on the option definition.  This change flags all
python-keystoneclient options containing a password.

Change-Id: I1ffc9727ab66c7acc6d4cf8e5870bb32f5e68b67