subnets/vagrant: Make puppet master autosign certificates
For reasonable swh domains. This matches the current pergamon setup.
Related to T3325