I think we still want the refreshonly => true so it doesn't get done on every puppet run