Puppet needs to use default keylength 2048 on FIPS enabled systems

FIPS 140-2 does not allow for the use of 4096 bit keys. Therefore, the initial certificate generation of a key using a key length > 2048 bits will fail.

Any system that is FIPS enabled, should use a 2048 bit key when generating the initial CA and server certificates.