manage PAM access.conf with Puppet