add keystone token_expiration_in_seconds to keystone role defaults