We should support Foreman being used without a puppetmaster (this is separate to #2414 which involves removing puppet libraries from foreman core). It should be possible to use Foreman purely for provisioning. Setting[:handle_ca] will allow us to not have a puppet_ca proxy, but we still need a puppet proxy due to Host validations.