Refactor puppet

[jewzaam]

I'm creating some authn/z documentation today and am referencing puppet classes. This is making me aware of some rework that needs to be done in the puppet classes. There are three main themes of problems I see:

1. classes are in places that don't make sense
2. classes are too big
3. there seems to be some duplication around client configuration

Not sure the full list of things that need to be done yet. I do think that this rework should happen at the same time.