using prefix in 'puppet_managed' folder
changing to use new ssl init style
only ensure local_cert_install_dir if it is not 'puppet_managed'