ensure that only one node is set for the keystone-server role

this change depends on https://github.com/crowbar/barclamp-crowbar/pull/782