> So, we have to explicitly add any new requirements for keystoneclient master to keystone stable/grizzly's requirements file as long as stable/grizzly is supported?

That, or uncap keystoneclient in stable/grizzly keystone pip-requires.

Cheers,
Alan