This change adds information about keystone policy support in the
following places:
* api-ref: add notes to the Nodes reference, indicating that
password and configdrive contents may be hidden in responses
* deploy security guide: add a section about limiting API access
by using the new policies and roles
* deploy install guide: add instructions for creating the necessary
Roles with the Identity service
* dev quickstart guide: use devstack "demo" user throughout the guide,
and add a note about why. Incidentally, switch to using "openstack"
client instead of "ironic" and "nova" clients.
Partial-bug: #1526752
Change-Id: I392cabbf04badabd8ae7bb00a914b0a06db3d421