Propagating an argument to search out of core.
Puppet::SSL::Host.search (which will proxy to the new indirection) accepts an array of classes (now also class names) to limit the search. Currently, puppet certificate list limits itself to certificate requests to mimic the behavior of puppet cert -l.