keystone required on this node, becuase of the certs needed