Foreman has a powerful templating API that can be often leveraged in many ways. But in order to be able to use this endpoint, it is important to understand all concepts and limitations.
This is a companion discussion topic for the original entry at https://theforeman.org/2018/01/templating-security.html