puppetserver does a bunch of resource ensures outside of the normal catalog application on startup to make sure it's runtime environment is sane, no?