ensure that only one node is set for the keystone-server role