Start puppet if certname changed, change certname to conform to regex for auto-sign.