fixes #2065 - use version dependent puppetrun/kick path

Specify wildcard in sudoers rules to enable "puppet kick <host>", else sudo
doesn't permit additional arguments.