New keystone_user 'ignore_default_tenant' param

If this parameter is set, then it can be used to cause puppet to never
try to change the default tenant.  This can be useful if your keystone
backend is LDAP and you're not storing default tenant.