Add keystone support

Some notes:
* only project_id required (with `tenantId`), project name is extra dependency
* `tenantId` actually works with test server and on AT&T installation