Description of problem:
Currently we can either set a subnet (and remote execution capsule through the subnet) or distribute all capsule ssh keys to all clients in case a subnet isn't defined for a host. In some environments with a lot of subnets this ends up being inconvenient.

If the content source is set for a host (via host group) it would seem that the preferred capsule has already been chosen for the host. In these cases, it would be more convenient to distribute only the content source ssh key and define the remote execution capsule for the particular host as well.