Change cacertdir for RedHat variants to /etc/pki/tls/certs.
Refactor params.pp to use osfamily where applicable.