keystone setup: refactor out of openstack-setup role