When using a smart-proxy for your Puppet CA, foreman still attempts to use /etc/puppet/autosign.conf. If it does not have permission to it, it will not be able to build the host and you get an error in production.log.