[roxy] Clean up bootstrap-osd key permissions

Don't create a cap without permissions, reassign
global root permissions to them and then hang on waiting
for permissions to be changed.