Foreman currently tries to read CA signed cert files before it calls puppetca to clean them. However, if foreman is not running as either root or puppetmaster, it won't be able to read the ssl/ca/signed directory to check if the files exist or not. The test will always declare the file doesn't exist, so certs will never be cleaned, breaking unattended builds.

This simple patch just makes the puppetca call unconditional.