Maybe it has something to do with the service_token_roles_required = True in nova.keystone_authtoken? (Just thinking loud.)
Maybe it has something to do with the service_ token_roles_ required = True in nova.keystone_ authtoken? (Just thinking loud.)