Might as well do this for db_user & db_name while you are at it. Barewords for strings in Puppet are yucky.