add 'allow_unknown_minions' option to overlord - let's us have minions we don't have the certs available for locally but we know the host exists. Func will attempt to make the connection based on just resolving the name. If it resolves and the cert the host offers is signed by our Certmaster/CA then it will continue as normal.
getfile module added (opposite of putfile with sensible directory
lots of fixes to the grouping code with puppetminions
when we create dirs for our command dbs on the overlord side, don't
assume everyone is global and root - behave when run as a user.