Sigul changes are very low risk, as we're mostly done with the signing and puppet is currently disabled on these hosts. However vault may be rebuilt tomorrow and if so I want the puppet modules to be correct for the rebuild. -- Jes