Ensure keystone log ownership

Also explicitly set DB user to keystone_admin so we can use puppet-keystone with
latest stable/havana.

Change-Id: I4601ee174104085cb21ed5178afab49b7976d5e7
Fixes: rhbz#1071674

packstack/puppet/templates/keystone.pp

@@ -28,3 +28,10 @@ cron { 'token-flush':
     ensure => 'running',
     enable => true,
 }
+
+# In some cases we have to ensure log has proper owner
+file { '/var/log/keystone/keystone.log':
+    owner => 'keystone',
+    group => 'keystone',
+    require => [User['keystone'], Group['keystone']],
+}