Use pki_setup to set up keystone properly