Description of Problem:

See the first comment on the satellite issue here: https://issues.redhat.com/browse/SAT-42216 for a detailed description of the issue and proposed solution.

tl;dr: Candlepin should stop including the upstreamConsumer data (that include upstream id cert/key) in the response to GET /consumers/<consumer_uuid>/owner.

Version-Release number of selected component:

All known candlepin versions

How reproducible:

100% of the time.

Is this a regression issue:
Yes

Steps to Reproduce:

0. Import a manifest to Satellite

1. register a RHEL system to Satellite

2. run # subscription-manager identity on RHEL system 

3. cat /var/lib/rhsm/cache/current_owner.json

Actual behavior:
The manifest consumer's identity (cert and key) can be seen from each registering client 

Expected behavior:
Registered clients should not have this information.