REP-819 Keystone V3 Filter

The mess that is Keystone v3! Comment on _everything_ so we can get this fixed up. =)
So this might be a bug in the client-auth filter, then. I'm updating the Keystone v3 filter to do the right thing, but should a story be created to fix in the v2 filter?