title: Puppet agent on fail function?
body: <p>Do Puppet agents have any type of on failure ability?</p>
  
  <p>I want to create a rule that says if a puppet agent tries to check in fails due to an SSL issue it should remove its SSL certificates and attempt the check-in process again.</p>
  
  <p>I know all the commands I want to run, it's just a matter of finding a way to execute a script on SSL failure. </p>
  
  <p>Any suggestions on how to do this?</p>