Open puppetmaster firewall only when puppetmaster is running

Other Maestro master nodes may not have puppet master
Add scripts to the tarball and fix upgrade of manifests rpm
Show diff on spec error