add helper script for SSL/puppet start over