And actually - as I see it - I can still make my puppet code agnostic by using the same regex that I'm using to assign membership to my dynamic group and use it to determine the value of the variable during a puppet run.