fix up the keystone role