Enforce SSL configuration using puppet, add dirs for debian and global CAs