don't need mysql root pw in offline context anymore...
just make sure we have keystone client in container...
minor change to make this more consistent with instructions...
instructions seem wrong, yet again...