Could you actually make a parameter for `$activemq_brokername` (default undef) and use `pick($activemq_brokername, $::clientcert)` for this? Many machines don't have fqdns.