puppetDB should listen on external address to honor SSL cert name