initial keystone integration

Not sure. The documentation mentions them as "configuration options".