Keystone: disable PKI tokens by default

Disable PKI tokens in keystone by default (forces token_format = UUID in keystone.conf)