keystone role cleanup

Adding names, using success filter, using failed_when instead of
ignore_errors, and whitespace