keystonerc must come earlier