- download gpg keys if gpgkey is defined - ensure the profiles::defaults is called first
- add fact to detect firstrun - run a limited subset of classes on firstrun - firstrun: includes: - vault ca certificates - yum/apt repositories - fast-install packages with an exec