Add kerberized keystone scenario

This adds a basic kerberized keystone scenario that uses FreeIPA
for LDAP identity as well as it's Kerberos infrastructure.