allow puppetmaster ssh out