force rkhunter update on each puppet run, not just on new packages