No bug: set permissions on /etc/hiera so puppetsync can read it; r=rail (irc)