Configure lock_path / keystone_signing_dir in Cinder

Otherwise a random directory in /tmp is chosen, which
doesn't work for our multi-process setup