Make it possible to not configure a Keystone user.
Make it possible to define a separate public port for e.g. SSL reverse proxies.