Alter server.xml.erb to sort hashes on keys before using them in order to have the same config file on each puppet run.  Fix: use each instead of each_pair since .keys returns an array instead of hash.