Comment 13 for bug 1300246

https://github.com/openstack/heat/blob/master/heat/common/context.py#L38

The new group is added via keystoneclient.auth - I'm not familiar with why that's done like that, and neither is miguelgrinberg the co-author of the patch.

I'll check with Jamie Lennox, since he invented the auth-plugin mechanism in keystoneclient IIRC, and wrote much of the heat code porting to use them. He'll either be able to clarify how that's supposed to work with genconfig, or confirm that we can convert to directly registering directly via cfg.CONF.