The proxy_token behavior is no longer working with keystone. Keystone even took out the functionality all together. Ive re-added the functionality to keystone via (https://bugs.launchpad.net/keystone/+bug/948439). In doing this, it changes the expected behavior of how novaclient should work. novaclient will need updating to be able to work with it. Ive got a fix that will rename token to proxy_token everywhere, since thats how its used anyway, and add the proxy_tenant_id so that it will work together in happiness.