In pursuit of phab task T104588, I just switched labs services from the keystone v2.0 api to the v3 api. In theory everything that once worked should continue to work, but if anyone encounters unexpected failures and/or permission errors, please let me know -- it is probably my fault. -Andrew