fixes #2065 - use version dependent puppetrun/kick path

Specify wildcard in sudoers rules to enable "puppet kick <host>", else sudo
doesn't permit additional arguments.

Depends on https://github.com/theforeman/puppet-puppet/pull/28