update puppet ca