code: def validate_uses_tls_for_keystone(audit_options):
      
      section = _config_section(audit_options, 'keystone_authtoken')
      assert section is not None, "Missing section 'keystone_authtoken'"
      assert not section.get('insecure') and \
          "https://" in section.get("auth_uri"), \
          "TLS is not used for Keystone"
docs: Verify that TLS is used to communicate with Keystone.