Create new Discovered Hosts using a new route that avoids a YAML upload (and therefore doesn't need require_trusted_puppetmasters)
Cache facts and upload to foreman when they change
Add extra facts