fixed puppet certificate exchange