Move security-tracker cert to puppet