Add acceptance test for Puppet CA/cert faces

It was broken in Puppet 4 and no one knew.

take into account:

• tests/ssl/puppet_cert_generate_and_autosign.rb
• tests/ticket_3961_puppet_ca_should_produce_certs.rb
• tests/ticket_3360_allow_duplicate_csr_with_option_set.rb
• tests/ssl/autosign_command.rb
• tests/ssl/ticket_5274_private_key_modes.rb
• tests/ssl/certificate_extensions.rb