Have puppet track the tomcat user