So, RDO just seems to be sticking with upstream behavior.
dist.conf is not upstream, it was introduced in the initial Fedora
packaging specifically to enforce distribution defaults.
Regarding paste.ini, the thinking was that this is NOT an user
configurable file and should be treated as _code_ because it has full
code paths for filters which could change between releases so RPM
packaging is doing the right thing by keeping distro default out of
/etc and overwriting it on upgrades. There's still an option for users
to create paste.ini in /etc or wherever and point to it in
/etc/keystone.conf [paste_deploy] section but this is problematic from
the support perspective.
Keystone project could consider providing something more supportable
like Glance with paste_deploy.flavor instead of documenting editing of
paste.ini.
Cheers,
Alan