Changes after testing
Hiera should use clientcert
remove default tier