or create a puppet user that has permissions so it doesn't have to run as root