Without this, in pfs deploy, /var/log/keystone/keystone.log has owner as root and application runned under keystone can't write in this file.