Add parameter to install certs from the puppet client or server,
and use @varname in the template.