Added keystone server support for the use_flat_membership config option.

When set, keystone will treat roles as separate LDAP tree lookups instead of being subtrees of the tenant/project entries (i.e. a flat model).