find correct keystone-server 

 (also in the HA case, when only the founder has [:pki][:content] values)

https://bugzilla.novell.com/show_bug.cgi?id=891559