Fix keystone user-role association.