It might not be necessary to support "updates" on the proxy, but only updates of hosts on the Foreman side, then skip if there's an OTP set.

I'm thinking mostly of cases where a host has already been built, the OTP gets cleared and then somebody puts the host back into build mode.  This won't activate queue_realm_create because this isn't a new record, but will hit queue_realm_update.

So you could just do:

<pre>
def queue_realm_update
  if self.otp.blank?
    queue.create( ... create realm entry ....)
  end
end
</pre>