@Spredzy Yes, that might be better, for now I'm not sure I want to put "sudo config" into hiera.

I discussed this a bit IRL with @adamcrews, it's kind of a "6 in one hand, half dozen in the other" situation. I'd prefer to keep this here until we feel more confident in the separation of data and configuration in hiera.