Tidying up root@ members who can encrypt
Adding puppetmaster key so it can unencrypt