Use ldap's purpose field (ganeti/kvm host) to decide which hosts get the puppet ganet...