adding a puppet rake task, fixing a bug regarding clearing unsigned certs