Manage peadmin homedir

Because apparently no packages create it, so it's up to Puppet
Arrange for ca to happen before activemq

At least when they're both being deployed on the same system.