Add waitforcert option for puppet_certificate

Default to 2 minutes