The puppet facter releases a os version number https://docs.puppetlabs.com/facter/2.3/core_facts.html#operatingsystemrelease, that we use in https://github.com/hardening-io/puppet-ssh-hardening/blob/master/lib/puppet/parser/functions/use_privilege_separation.rb#L19
This does not work as intended in debian 8 prerelease due to the fact that
$ cat /etc/debian_version
jessie/sid
does not return a number like on debian 7:
$ cat /etc/debian_version
7.7
Therefore the server config will include UsePrivilegeSeparation yes instead of the intended UsePrivilegeSeparation sandbox