We download the latest versions, and edit them.  However, the online
versions have bugs in the pipeline configuration, and the default
pipeline config no longer supports keystone auth through the proxy
server.  I don't know why, it means their online setup docs result in
non-working configurations, but whatever.

So, always set the pipeline now, and make sure it has keystoneauth.