add hardening config to puppet deployment