Add a config group with a Puppet class assigned, then assign the config group to a host. Provided the parameterised ENC is enabled, view the ENC YAML output from the host page and the new classes won't be listed.

It appears that the Classification::ClassParam / Base implementations have their own way of getting the puppetclass_ids for a host and its host group, without checking for config groups too.