Changed to use puppet certificates