Cloned from launchpad blueprint https://blueprints.launchpad.net/keystone/+spec/ephemeral-pki-tokens.

Description:

With token revocation events in place, we no longer have a need to store a token revocation list. The token revocation list is the primary reason why keystone bothers to persist PKI tokens, so without it, PKI tokens can become completely ephemeral.

Two steps are required to make that happen:

1) revise code that validates tokens from the token backend to pull from context instead

2) allow deployers to opt out of token persistence (UUID tokens must still be persisted)

Specification URL (additional information):

None