This is currently waiting on further hashing out of the right approach, see comments on https://github.com/puppetlabs/puppet/pull/7746