add HA support via pacemaker barclamp

Allow the keystone-server role to be applied to more than one node.  If
HA mode is enabled, virtual IPs are allocated on the admin and public
networks, and grouped together with a Pacemaker resource primitive which
controls the keystone server service.