Scout puppet run plugin fix

    We commonly use the scout puppet last run plugin on our hosts, but the
    default perms for a puppet install prevent it from running.  This opens
    them up enough so it can do it's job.  Looks like this has been manually
    done in the past, so just codifying existing practice.