keystone config template