One extra stealth flag that isn’t documented is

--puppet-service-debug

that passes

--debug

to

puppet resource

when controlling the puppet service.