Add initial puppet run to generate CSR

Add keyutils, use override instead of fallback for homedir

Run puppet before and after domain join. Leave domain before joining.

Initial commit