fix puppet hardening to pass all requirements (this requires the latest tests-apache too)