always set signing_dir

keystoneclient tries to create this directory if it does not exist and
the default is ~/keystone-signing