use puppetmaster variable in cert request