Puppet enables automated flow. "Security" is often perceived as antithetical to flow. We will demonstrate how to create secure Puppet workflows, where agents have individual identities that are authenticated, authorized, and their activity audited. We will show how this can be done without slowing down provisioning and deployment workflows, and how to get started immediately using open source resources and a Puppet Forge module. We will go on to how to apply these capabilities across the organization, including how to: - generalize this approach for containers, container orchestration and other automation components - include human users in secure automated workflows when necessary - scale this approach for large organizations - allow security teams to establish foundational enterprise security policies for automation - delegate day-to-day management responsibilities to individual teams, without losing control.