patched init_admin outside puppetmaster (condition uses unless rather than generate)