Just looked into this. The default for the status terminus is `:authenticated => true` (https://github.com/puppetlabs/puppet/blob/master/lib/puppet/network/authconfig.rb#L21). Since we have a certificate by the time we reach this point, then I think we are good.