Use read-only url for rhos-puppet