Anything where I activate membership from within puppet code isn't going to get the benefit of hiera overrides.