make nova ssh keypairs optional

It is not always the case where a nova keypairs are avaialble. So,
make their inclusion contingent on a role default.