move logs and ssl into /srv/keystone volume
removed erroneous RUN prefixes from start-keystone.sh

this is what happens when you copy and paste.
added README
keystone needs policy.json and ca_key config option
protect runuser from keystone options