keystone-manage should be run as keystone user

This will fix havana "keystone-manage pki_setup" and also fix premission of
the log file created when keystone-manage is run.