Comment 5 for bug 1559362

Cause identified: keystone token not refreshed after expiry. Some clients handle refresh (e.g., neutron, nova), but some don't (e.g., glance, ironic, murano, heat). For the clients that do not handle refresh, the datasource driver needs to handle the refresh. The workaround has been implemented in other drivers, but not in heat.