Change token_format to PKI in keystone