Add a check for puppet client cert expiration