Puppet modules for CIS Benchmark compliance