[CentOS] Selectively updating protected repos