Plugin doesn't use /var/lib/puppet/ssl certificates if they cannot be read