find correct keystone-server 

 (also in the HA case, when only the founder has [:pki][:content] values)

https://bugzilla.novell.com/show_bug.cgi?id=891559
Token format is certainly the case; I'm not sure if they are others...