5e06ec8163
This implements part 3 of the proposed change for immutable roles[1], as well as adds a release note. Part 4 (changing the default behavior of ``keystone-manage bootstrap`` will have to come in the next cycle. [1] http://specs.openstack.org/openstack/keystone-specs/specs/keystone/train/immutable-resources.html#proposed-change Change-Id: Ie9d658deb1fa69e9007f3c50535b5c48a7a292d1 Partial-bug: #1823258