Move to newer fixed puppet_spec_helper

0.5.0 had a bug that broke mocks
Add keystone active/passive groups

This allows having active/passive keystone groups.  This is useful if
you have multi-site keystone configuration and want to default to using
the local keystone if it's up.