let keystone download pki related files from puppet server