Comment 1 for bug 900553

On second look, /etc/keystone/keystone.conf ( like every other openstack component) stores its database credentials as plain text sqlalchemy string. This is should be installed non-world readable.