restrict access to puppet logs to root users

RT: 8022
RT: 4058

Change-Id: I274b4f830f8860c6e37d0b31d424a7549144fabe
Merge "restrict access to puppet logs to root users" into production