keystone.common.policies.ec2_credential module