put back puppet signing by polling and add it as a fallback in the
provision.