Configuring Puppet's Policy-based autosigning