manage keystone backend services via clone LWRP

This requires https://github.com/crowbar/barclamp-pacemaker/pull/33 so should not be merged until that one is.