In cfengine you can configure your workdir, default: /var/cfengine
The scenario policy server uses the default and our debian client: /var/lib/cfengine3
The bootstrap of client fails, because the generated 'failsafe.cf' use sys.workdir/masterfiles. Is equal to:
This directory is unknown on the policy server and the bootstrap fails. cf-serverd should know that this is bootstrap protocol and uses
its own sys.workdir/masterfiles setting.