Shouldn't a dependency on the app root be sufficient here, which puppet does automatically since 2.7.