Paul,
Thanks for the tip regarding approaching the problem from a more
puppet-like declarative stance. I'm not really sure that it's possible
here, besides making a custom resource type as you mention.
The main hurdle that I see with any solution is that fundamentally
generate() / file() d
zed_keys (which serves no purpose, but it's the same format and
that file will always exist) and the second execution does the right
thing. But it's pretty gross, and it means users will take a longer
time than necessary to fully propagate.
Is there some method that I'm overlo