set modes on /etc/portage.*/* files and stop supporting puppet-2

old machines will need to be moved fully but as there are not much yet
that should not be to much of an issue. Also most of those machines
really need to get with not using ldap for much...