I'll update the comment to reflect that we do already know the hosts.  This solution is required unless we add more complex behaviour in adding the client machines up front.  I'd like to get this in as it is, keeping it as simple as possible.

We can rework this once we implement the "Nice to Haves" from here: https://github.com/theforeman/staypuft/wiki/Puppet-ssh

Thoughts?