Keystone override: disable PKI tokens by default

Disable PKI tokens in keystone by default (forces token_format = UUID in keystone.conf). PKI tokens are really slow and 32-bit UUID's should suffice in most use cases.