wavesoftware-passless

It's a Puppet master password implementation that uses Puppet server's CA to automate password creation.