A registered RHEL system should be able to access content on registry.redhat.io as soon as it is registered through subscription manager, without an additional step to configure a registry access token. While it's not the only possible approach, the simplest way of doing this would be to allow a client to present a RHEL entitlement certificate for mTLS authentication, just as we do for access to RPM repositories.

See RHEL-50244 for more details and a link to a google doc.

rhn-it-hseljene tried implementing this, and was able to get it mostly working, but there were compatibility issues with at least one client accessing the registry, and he backed the work out. rhn-it-hseljene - can you provide more details?