Fix troublesome reboot

A reboot command intended to force a CA cert update proved to be too early in
the puppet manifest, causing some machines to reboot endlessly.