Move modules/passwords/templates/root-authorized-keys.erb and the related logic from the labs/private (which is not supposed to have 'actually important' stuff) to the main puppet repo.