fixes #2065 - use version dependent puppetrun/kick path

Specify wildcard in sudoers rules to enable "puppet kick <host>", else sudo
doesn't permit additional arguments.
Add SSL and trusted hosts configuration options

Defaults to SSL enabled, using Puppet certificates and key
Ensure sudoers.d exists before attempting to use it