Move cert stuff to the puppet setup file