More notes on external keystone authentication