Stub out unmocked keystone in test_engine_service

Keystone needs to be mocked out whenever stacks may do something that
triggers authentication. In this case failures to auth would not result
in a failure of the test because we are not asserting the end state of
the stack or the list of events we expect.

Change-Id: I401971cfc984bd71c611eae70aeb33b2f5a3c8c6
Closes-Bug: #1227962
Support defining update_allowed in the property_schema

This has a couple of advantages:
- docs will be easier to generate
- everything property related is in one place
- it's a bit easier dealing with TemplateResources
- it will allow us to set update_allowed on nested schema

Change-Id: I5e59bc07e51fe4c5d58871cb2adcef7e16f9b2af
Partial-bug: #1240583
change base resources to use UpdateAllowed property schema

Partial-bug: #124058
Change-Id: I668de29e1eec34d7499dcc8d435ebe6882c74a4a
change contrib/ to use UpdateAllowed property schema

Partial-bug: #1240583
Change-Id: I1bf09f10efe7ed47bfa4f0178d29689c9fc71d43
change alarms to use UpdateAllowed property schema

Partial-bug: #1240583
Change-Id: Icfa37f99b7e016e805526299b7717283cdb9d82d
change neutron to use UpdateAllowed property schema

Partial-bug: #1240583
Change-Id: If73c678fc0449aca10c273b4521d006d53e0094a
Merge "Stub out unmocked keystone in test_engine_service"
Merge "Support defining update_allowed in the property_schema"
Merge "change base resources to use UpdateAllowed property schema"
Merge "change contrib/ to use UpdateAllowed property schema"
Merge "change alarms to use UpdateAllowed property schema"
Merge "change neutron to use UpdateAllowed property schema"