pki-setup should be run regardless of token provider

The puppet-keystone module currently will only execute
'keystone-manage pki_setup' to create the signing key if the PKI
token provider is being used. The signing key/cert is still used
for signing the token revocation list, even when the UUID token
provider is being used. We should be running
'keystone-manage pki_setup' if enable_pki_setup=true, regardless
of token provider.

Change-Id: I2817fbde74cbd50cae31f681503816e576cc7b60
Closes-bug: #1373064