Need to wait after puppet agent start before validating the certificate