i agree that this seems wrong  but that is the way it works due to the way in which the auth plugin is created in the dummy context used for testing  the keystone endpoint is stubbed for all clients  see l 