Make OpenStack Keystone password removal default

The keystone plug-in used a command line option to enable password
removal. This should be the default behaviour - remove the option
and always apply the password replacement rules.

Signed-off-by: Bryn M. Reeves <bmr@redhat.com>