Key acceptance is done via the SUSE Manager Server web ui. The SUSE Manager Proxy is just routing the Salt message bus to provide network separation. There's no 'salt' installed on the Proxy.