Separate out keystone registration calls from other recipes

Only one node needs the keystone registration stuff in its runlist.