Conflicting sshd_config w/ condition does not result in failure

[jbcraig]

I would expect the following to result in a catalog failure as the same setting is set two different ways:

sshd_config { 'Host anotherhost.example.com PermitRootLogin':
  key => 'PermitRootLogin',
  ensure => present,
  condition => 'Host anotherhost.example.com',
  value => 'without-password',
}
sshd_config { 'Host rootallowed.example.com PermitRootLogin':
  key => 'PermitRootLogin',
  ensure => present,
  condition => 'Host anotherhost.example.com',
  value => 'yes',
}

but instead results in the value flip-flopping in the same run:

puppet apply ./sshd_test.pp
Notice: Compiled catalog for jc-sol11.example.com in environment production in 0.04 seconds
Notice: /Stage[main]/Main/Sshd_config[Host anotherhost.example.com PermitRootLogin]/value: value changed ['yes'] to 'without-password'
Notice: /Stage[main]/Main/Sshd_config[Host rootallowed.example.com PermitRootLogin]/value: value changed ['without-password'] to 'yes'