right... !

I think we should do a similar test for the puppet_ca proxy, but all of that should be wrapped in a if condition only if the puppet proxy is not set?