Updating Keystone to setup PKI

As PKI is now required for Keystone, I am setting up the minimally
required setup - a self-signed cert via keystone-manage. This
should be augmented to support real certs in the future.