use service_ entries for keystone comms