cephx key management fixes

 * consistently parametrize pools, Cephx users and ACLs
 * use parametrized Cephx user when generating Nova secret
 * unscatter creation of Cinder and Glance pools into ceph::pool
 * create Glance pool before Cinder ACL
 * up osd_pool_default_size to 3