Changed #config_by_role keystone handling

Identity attributes are no longer at the top level of
the node.  Need to properly access the new attributes.
Tests needed to be adjusted so that they would pass.

Change-Id: I0a697c217364a26ae97cf31d37a32e97f11c2e85