however -- if we start defining the puppet module as a stricter interface to Puppet, then we don't so much care if people can untar it and look at its internals