write nova.conf [keystone_authtoken] section to avoid ERROR: Unauthorized (HTTP 401)
support KEYSTONE_SERVICE_PROTOCOL=https in keystone.conf