I think it would be better to change this to be something more Barbican specific.  `SERVICE_ENDPOINT` is already defined by the keystone client to be the keystone endpoint service accounts can use to authenticate using the `SERVICE_TOKEN`.  Maybe change this to `BARBICAN_ENDPOINT`?