Current pull provider is only able to run script type jobs. Even if the capsule is configured to use pull-mqtt mode, ansible will use SSH (or whatever is set in ansible_connection variable).

Insights remediations are always run over ansible and SSH. This port is often blocked by security and satellite can not use ansible integration because of this.