I don't think this is correct. You're placing the puppet.conf build into auth.conf.