Description of problem:

clients registered to Satellite 6.18 obtain a copy of the Satellites manifest consumer profile cert and key after running subscription-manager identity 

How reproducible:

every time 

Is this issue a regression from an earlier version:

no 

Steps to Reproduce:

1. register RHEL system to Satellite 6.18

2. run # subscription-manager identity on RHEL system 

3. cat /var/lib/rhsm/cache/current_owner.json

Actual behavior:
The manifest profile consumer identity (cert and key) can be seen from each registering client 

Expected behavior:
As it is unknown why a registering client has this information, it is not expected for all registering clients to have this information

Business Impact / Additional info:

With the permissions for this file being world readable, any user on a Satellite registered client could manipulate the Satellites' subscription allocation.