The owner of the puppet configs needs to be puppet, not root'