I don't think puppet.conf should be owned by puppet. I'd prefer it to be root.