allow running puppet as root