Keystone SSL, other services non-SSL. Added insecure aliases to bypass self-signed cert validation. Glance configs now written out in full but currently a small hack, no variable replacement.