rsyslog should put certificates somewhere other than /etc/rsyslog.d
Description
The rsyslog.d directory is unmanaged by Puppet and is intended to be entirely user controlled where as the rest of the SIMP controlled rsyslog config may depend on those certificates.