Distribute separate binaries for master and ca

Downstream SELinux-aware distributions need to add shell wrappers for "puppet master" and "puppet ca" command to be able set puppet_exec_t file context for successful domain transition.

Without this, it is not possible to start master or ca process in the correct (secured) domain.

I am going to send this little patch that we have in Fedora and EPEL for years now upstream so other SELinux-aware distributions can take advantage of this.