tag as puppet managed