Comment 16 for bug 1754682

That said, looking at the codepaths it would appear that using the ssl_* options should override any keystone charm generated certs and keys.

However I'd still not recommend using the charm this way.