Clean up bootstrap-osd key permissions

Don't create a cap without permissions, reassign
global root permissions to them and then hang on waiting
for permissions to be changed.

(cherry picked from commit 6922baad4c252878611375dd588c0a18d998d9ea)