Use 'keystoneclient' instead of 'keystone'.

Keystone tool is still present but deprecated, seemingly broken.

Change-Id: If14fbb10fc8f5cac67def00720730c0de2cabefa