Add fine grained key-pair policies

Currently the keypair extension has one policy action: "compute_extension:keypairs". This would add additional sub-actions: "index", "show", "create", "update" and "delete". Use cases for this include: allowing an administer to add a user's keypair to an instance; allowing an instance owner to spawn an instance with other users keypairs, allowing an administer to view users keypair information.