---
upgrade:
- Fernet token is now the default token provider for keystone.
- keystone::enable_fernet_setup is now true by default to ensure fernet tokens
work out of the box.