Update keystone's selinux policies

Allow openssl to read keystone ssl files.

Move /mnt/state directory creation to configure.d.

Change-Id: I75ccbaf3fa4efde1c48340de7c63efa30652e3e0
Merge "Update keystone's selinux policies"