Configurable cert locations for token signing

Otherwise cloud admins can't really provide their own certificates
without putting them into the default locations (and hoping that nobody
runs keystone-manage pki_setup).
Merge pull request #89 from saschpe/release/pebbles/master-token-signing

 	Configurable cert locations for token signing