use keystoneclient for auth and endpoint lookup