I'd tend to consider this is a vulnerability in Nova, and the python-keystoneclient fix is more a strengthening thing (warn when the configuration is insecure)
I'd tend to consider this is a vulnerability in Nova, and the python- keystoneclient fix is more a strengthening thing (warn when the configuration is insecure)