Stop creating KeystoneAdmin KeystoneServiceAdmin sysadmin netadmin roles

These roles have absolutely no use anymore since quite some time. And
they were dropped from the sample data in Grizzly:
https://github.com/openstack/keystone/commit/d6f7cbc484868bdec3eeb9d4b0f45b10ce536e79
Rebase keystone.conf to Grizzly.

Actually uncomment sql.idle_timeout. The following options where dropped
from keystone.conf: public_host, admin_host, compute_host, min_pool_size,
max_pool_size, pool_timeout. Use default compute_port (8774), the nova
cookbook does the same. Provide public_endpoint/admin_endpoint for the
v3 API.
Configurable cert locations for token signing

Otherwise cloud admins can't really provide their own certificates
without putting them into the default locations (and hoping that nobody
runs keystone-manage pki_setup).
Merge pull request #84 from saschpe/release/pebbles/master-keystoneconf-grizzly

Rebase keystone.conf to Grizzly.
Merge pull request #89 from saschpe/release/pebbles/master-token-signing

 	Configurable cert locations for token signing
Merge pull request #90 from vuntz/drop-unneeded-roles

Stop creating KeystoneAdmin KeystoneServiceAdmin sysadmin netadmin roles
Fixup of previous pull.
Merge pull request #93 from saschpe/release/pebbles/master-token-signing-fixup

Fixup of previous pull.