spcc - puppet cert clean