The default out-of-date cron job always uses the host/* principal of
the local host for authentication instead of the first principal in
/etc/krb5.keytab, which may be for some other principal or a host/*
principal for an old hostname.

The deletion of the server files was somewhat too aggressive.

Remove out-of-date::server.  This is only used on a single host, so
all of the files and Puppet manifest have been moved to the Puppet
model for that server.

This is the (old) master branch along with the fixes to the
cron file permissions that Russ made.