I recently switched to using libvirt over TLS to get around issues with SSH timeouts I was having previously (see http://projects.theforeman.org/issues/8535). I seem to have run into another problem now, in that connections to libvirt over TLS never get closed. This means that the number of connections to libvirtd keep on increasing until you hit the max_clients limit in libvirtd, at which point any Foreman libvirt functionality breaks as it can no longer establish connections to libvirtd.

The only way around this for me at the moment is to track the number of open connections in Nagios and then restart libvirtd when we get close the the limit.