Why are options for Satellite global resgistration URLs created by non-admin users ignored by hosts?

Issue

• Why when I create a registration URL in Satellite as a regular (non-admin) user, if I choose to disable some of the setup options like remote execution or Insights, hosts still get these options setup when they fetch and run the registration script from the URL?

• If I create the URL as admin, any disabled setup options are honoured, but if I create the URL as a regular user with role "Register hosts", any disabled options are ignored and are setup anyway.