Keystone PKI changes for grizzly

- force run pki_setup on CentOS, since this doesn't happen in RPM spec file
- store key/cert from keystone server in node attributes so we can use these same files on all keystone API nodes