Update cinder.conf.sample for new keystone client

The latest version of keystoneclient adds a new conf
entry that we don't have in Cinder.

This patch adds "enforce_token_bind=permissive"

Change-Id: I1aeb6a59ca1787c05075d76dd9d1f96722653d88