use puppet managed ssl certsificates