nodes: obey owner puppet var for desktops

We still need to clean up the auth definitions a lot, but in the
meantime this doesn't make it too terrible.
nodes: allow ocfstaff to sudo on desktops