first cut at heat api integration, but must use '--insecure' from the command
line since the client doesn't appear to use OS_CACERT from the env yet