jumpstart: use puppetmaster var in cert request