Allow puppet group read on private SSL files