Comment 2 for bug 1631078

Since I don't know when I'll get around to polishing up the patch for a proper review, here's a preliminary version. It works, but it fails a bunch of flake tests and the unit tests do not account for the changes in cinder.keymgr.barbican tests, yet.