factory from keystone instead of keystone client