we support puppet>=3.6 because of purge_ssh_keys in User type