Allow PE puppet nodes API access to delete their own certificate

apply.pp

pe_puppet_authorization::rule { 'allow-ca-client-delete-self':
  match_request_path   => '/puppet-ca/v1/certificate_status/([^/]+)$',
  match_request_type   => 'regex',
  match_request_method => ['delete'],
  allow                => '$1',
  sort_order           => 500,
  path                 => "/etc/puppetlabs/puppetserver/conf.d/auth.conf",
  notify               => Service['pe-puppetserver'],
}