keyring: use a specific group for permissions

- create a group 'cephkeyring'
- ensure nova and cinder are part of this group.

Note: I don't use Puppet to manage the users, since it's already managed
by puppet-cinder and puppet-nova.

Bug #402