use keystone UUID by preference over PKI

Default pki to false, and pass through to the keystone cookbook
properly.  Fixes #26