run puppet upon provion on agent
switch to naive autosign