Katello allows remote authenticated users to call the "system remove_deletion" CLI command via vectors related to "remove system" permissions.
katello katello -