My apologies, `add_puppetmaster_filters :create` seems to provide sufficient auth - I think I added the authorize block before copying that in from the old controller. I'll remove this.