The current standard foreman configuration uses systemd socket activation to start the foreman/rails service on-demand, i.e. when a connection arrives on the 'unix:/run/foreman.sock' socket.
However, this puppet module unconditionally ensures a running systemd 'foreman.service'. This seems a redundant operation and kind of defeats the 'on-demand' part of the configuration.