Comment 9 for bug 1951076

I'm thinking it's a change in hook sequence. I'm not seeing any upstream changes that would change the behavior. keystone-manage bootstrap docs don't mention anything but keystone-manage fernet_setup mentions the directory needs to exist prior to running.
https://opendev.org/openstack/keystone/src/branch/master/keystone/conf/fernet_tokens.py#L22