Adapt disable keystone service token for plugin

This task needs to be shifted to keystone role and
off of controller because that is where keystone is
deployed.

Change-Id: I3e4398aa0555a2c2794da9483415bc8ab523052e
Depends-On: I4f2877df1da087f10673edfc855868ebb2245be3
Related-Bug: #215132

deployment_tasks.yaml

@@ -69,6 +69,17 @@
   test_post:
     cmd: ruby /etc/puppet/modules/osnailyfacter/modular/keystone/keystone_post.rb
 
+- id: disable_standalone_keystone_service_token
+  type: puppet
+  role: [primary-standalone-keystone, standalone-keystone]
+  requires: [task-keystone]
+  required_for: [post_deployment_end]
+  parameters: 
+    puppet_manifest: /etc/puppet/modules/osnailyfacter/modular/astute/service_token_off.pp
+    puppet_modules: /etc/puppet/modules
+    timeout: 180
+    cwd: /
+
 - id: keystone-controller
   type: puppet
   groups: [primary-controller, controller]
@@ -91,6 +102,9 @@
 - id: openstack-haproxy-keystone
   type: skipped
 
+- id: disable_keystone_service_token
+  type: skipped
+
 - id: keystone-hiera-override
   type: puppet
   groups: [primary-controller, controller, primary-standalone-keystone,