This line --> https://github.com/Katello/katello/blob/658c07aa8e4e46a789682cad01225aff1c18e04a/app/models/katello/concerns/host_managed_extensions.rb#L550

searches a specific host's installed packages when composing a job template for package upgrades. However, we recently learned that (unlike a REX Script template) a rendered REX Ansible job template may not be specific to a single host, so we will have to come up with another solution here.

This is likely not super noticeable since hosts are usually limited by content view environments. However it could mean a host gets more updates than the user wants.