Our playbooks depend on the keystone user being able to login,
but keystone isn't a member of the allowedgroups for ssh. This
fixes that and optimistically adds ironic as well.
signed-off-by: dave kormann <davek@research.att.com>
Change-Id: Ia20065deab4ae4087e3a5918e891a2b73f5cbbed