Puppet preset: make sure it works even if ps is restricted by grsec