puppet_authorization