missed a security acl in the puppet migration