trusted hash is exposed to puppet, I think
# puppet-enterprise
v
trusted hash is exposed to puppet, I think