Remote Jobs - How To Restart goferd On Many Hosts When Only Katello Agent Allowed?

Still very new to Satellite 6. Have a situation where I can't install errata because goferd needs to be restarted on many systems. I can't configure root ssh logins for Ansible because it breaks the RHEL 7 STIG. Any suggestions how I can restart goferd on my hosts without logging into each one and doing it manually?

Thanks!

Jim