Restrict puppet & rbenv scope