provisioners/puppet: run in elevated mode on Win guests

I think that `puppet apply` should behave like `chef-solo` when dealing with Windows guests.

Currently puppet commands are run directly through WinRM, and because of WinRM security model, issues similar to the following one could happen:

https://tickets.opscode.com/browse/COOK-1172