We do the same in our environment. IMHO installing a new master which can't be provisioned using foreman itself should be provisioned using the installer or manually.