Another issue people might run into is documented here: Foreman auto-updating host operating system. Even if you create a xenial-updates OS it will likely get overwritten when puppet runs on the host and facts get returned. We had to create a new PXE template that specified the xenial-updates image and ramdisk and remove everything that relied on release in all the templates.
