@domcleal Well you're right.
I'm wondering though if File["${puppet::dir}/auth.conf"] should not refresh Class['puppet::server::service'] and not Class['puppet::agent::service']