[CentOS] Allow updates but not upgrades