fixes #1809 - freeipa integration to smartproxy
fixes #5019 - puppet cert sudo command now configurable and optional