The keystone library has been updated to support adding a user to a domain without specifying a project. Use it instead of shelling out to the openstackclient. Change-Id: I8e6e68957af02626e3c3e8c68189f04ea3dd0816