Seems like a dumb question but I don't have a test puppet, where I could easily check it. And on the other hand, before pushing to production I need to be 100% sure that it's working as I expect. My guess is that I need to remove the default profile from ENC until I migrate all the nodes, and rely on the catch-all rule in my site.pp