Well, with katello-certs, it would imply it won't do certs for foreman/proxy etc.