force puppetmaster to autosign all clients