Use project scoped token for cinder, glance services
Use project scoped token for cinder, glance services

All services except Ironic (and keystone to support ironic
with system scope deployement), will not have system scope in
their API policy instead they are default to project scoped.

Change-Id: Id13a359086f9b24dbfcd2b565a42c50d0dab7736

openstack/ironic,openstack/ironic