Initial support for making rpm packages immutable