move logic out of manifest and into template. Not ideal, but puppet has a limitation around array concatenation