Fixes #7643: Properly configure whether the puppet master is a CA.