Adding validation algorithm for get attr functions

Turn on validation for functions Fn::GetAtt and get_attr.
Validation will be skipped if resource has overwritten FnGetAtt method.

Related-Bug: #1273490
Change-Id: I15b6b7447face0cf2fe1d6059d3fb900778b66cc
Privilege checking for heat-keystone-setup-domain

This patch added additional exception handling so that a non-admin user
will understand why his/her attempt to run this script failed.

Change-Id: I20a593f613931de0b3c13094a2e0b6c2f2b0eea1
Closes-Bug: 1354687
Merge "Privilege checking for heat-keystone-setup-domain"
Merge "Adding validation algorithm for get attr functions"