service metadata

Deployment-specific workflows require a variety of metadata which cannot be facilitated by Keystone APIs today. Take Nova quota class and availability zones, for instance, ideally they should be able to attach to projects so Nova can effectively perform authorization based on those data. Like policies, metadata should be service-specific. Like service catalog, metadata are returned for as the result of successful authentication and token validation, if the token is scoped to a project.