Can't use file() to load the certificates as they won't be present in time. Use template() and use puppet file server URIs instead.