section on ssl headers in puppet.conf