Policy-Based Autosigning for Puppet using a simple challenge password and node role