Ensure pki_setup not run before configuration complete

Change-Id: I81bee474866c0a3c3786fcf1ab025163cbdc3ac9
Retry when keystone server refuses connections

Add an additional error type to avoid keystone client queries erroring
out while keystone server is being restarted

Change-Id: I5e3dd598af6f5bd72eae51f354ddde3cb0c0e07d
Ensure that mysql users are created before keystone-manage db_sync.

Otherwise keystone-manage might not have rights to populate keystone DDL.
Merge branch 'dev' of https://github.com/gwdg/puppetlabs-keystone into dev