using keep_ip as a puppet::Boolean