move the ldap key from ssh logic to openssh module ( more logical ), and add the hook in openssh config file
puppet/modules/openssh/manifests/init.pp