keystone token expiration is configurable w/ ansible