ginseng:/var/cfengine/masterfiles/inputs/cfrun.hosts
has no other purpose than to be used by anise to
populdate /usr/local/passwd.d

so...
1) ditch cfrun.hosts
2) have mkpasswdfiles create default.passwd
3) have cfengine copy $(host).passwd if it
exists else default.passwd
or something like that