diff --git a/openstack_operator/keystone.py b/openstack_operator/keystone.py
index 7c6bbcc2..115b2c86 100644
--- a/openstack_operator/keystone.py
+++ b/openstack_operator/keystone.py
@@ -31,7 +31,7 @@ MEMCACHED = True
 
 TOKEN_EXPIRATION = 86400
 FERNET_ROTATION_INTERVAL = 3600
-ACTIVE_KEYS = int(TOKEN_EXPIRATION / FERNET_ROTATION_INTERVAL)
+ACTIVE_KEYS = int(TOKEN_EXPIRATION / FERNET_ROTATION_INTERVAL) + 2
 
 
 def _is_keystone_deployment(name, **_):