Fixup puppet_cron and defaults.

Change-Id: I39d7821b9b287c32798275060a3e2acf9fafa8b9
No certificate needed for slaves.

Change-Id: I801b8019c7e55d4fedcf206700fd5a76ad6a4f66