Keystone v3 improvements.

Managers for project group membership, project user membership, project combined membership (users and groups); for group project membership, group users, group roles; for user project membership, user roles.
I'll have to see how bulk actions are implemented elsewhere. It's more artifact of how we're bound to openclient (yes, convenience).