I'd like to see these parameters as class parameters. Then you don't need the scope.lookupvar and it can make testing easier. From https://github.com/ekohl/puppet-foreman/compare/puppetlabs-apache-v2:

```puppet
class foreman::config::passenger(
  $ssl                 = $foreman::ssl,
  $ssl_cert            = $foreman::client_ssl_cert,
  $ssl_key             = $foreman::client_ssl_key,
  $ssl_ca              = $foreman::client_ssl_ca,
) {
```