find correct keystone-server 

 (also in the HA case, when only the founder has [:pki][:content] values)