On each Puppet run on a system that enables Puppet, check if cipher zero is enabled and disable it if so. Recipe from Darren Patterson.