During the finish routine of an image based host provision (vmware) there is still a required step where the central Satellite server makes a direct SSH connection to the managed host to finish the provisioning steps.
We need to route this through the Capsule to ensure that there are no network connections required between the Satellite and the managed client.
Just for the info: Finish script is not the only option for clouds - cloud-init can be used with OpenStack or AWS. But for virtualization, finish script is the only option.
Also Satellite -> Compute Resources is also direct (e.g. vmware vsphere or rhev).
Thank you for your interest in Satellite 6. We have evaluated this request, and we do not expect this to be implemented in the product in the foreseeable future. We are therefore closing this out as WONTFIX. If you have any concerns about this, please feel free to contact Rich Jerrido or Bryan Kearney. Thank you.