I recommend a service account, and then grant this...
# puppet
b
I recommend a service account, and then grant this accocunt access to the repos