I'd be curious what you're doing with it and if it shouldn't be in Jenkins or whatever creating an apt/rpm for agents to consume. Grabbing files from the puppetserver seems a little sketch. I'd guess you're generating some cluster level config that's easier to determine membership outside of a catalog compile.