It might be better for sanity to assign node[:keystone][:api][:protocol] to a short variable for the duration of the recipe, for the sake of terseness if nothing else.