puppet3: ssl terminators

Change-Id: Ic37e8f26af9c95a97e345d1fc3acb2568b13d3bd
Signed-off-by: Giuseppe Lavagetto <glavagetto@wikimedia.org>