When the first boot service runs insights-client, /root/.gnupg gets created with the wrong selinux context.
RHC automatically connects to insights already.
There are 3 different ways for subscriptions to be setup, test the pipeline to make sure it includes the correct commands, and check the package set chain to make sure it includes the packages needed to support the selected subscription mode.