For puppet cert cleaning, use default_name_servers_search if name_server...

If you don't specify the search domains for individual profiles because your default ones cover all, then the puppet cert clean will run without a domain suffix and therefore fail.

This patch uses the same technique as the lines above to check if there's a dot in the hostname added by the name_servers_search and if not, uses the default_name_servers_search.