exec{"ssh known hosts stuff is stupidly fragile":
    unless => "/usr/bin/awk 'BEGIN{p=0}NF<3{p++}END{exit p}' /etc/ssh/ssh_known_hosts",
    command => "/bin/rm -f /etc/ssh/ssh_known_hosts",
  }

  # Every host wants to collect all of the available ssh keys!
  Sshkey <<| |>>{require => Exec["ssh known hosts stuff is stupidly fragile"]}

Add a code snippet to your website: www.paste.org