This list can probably be reduced.  I assume that the cipher suite used by puppet is relatively small.