bug 893867: transition to PuppetAgain based signing servers. r=rail