convert autosign to use new Policy-Based Autosigning in Puppet 3.4.0+