Initialise keystone itself via APIs

There is no need to initialize keystone on the initial machine (though
we should arrange for HTTP endpoints by default). Initializing via
APIs makes scale out with identical images easier to reason about.

Change-Id: Idf9d6ba17d6ef352d17f8bf593be970cca310321