This feels a bit dirty that the ISO stuff would reach across to the yum plugin package. It feels worse when realizing the method that's used from it is validate_cert. It's probably a pain in the ass to refactor it and move that method out to something more common, especially given that Mike may be using it in his branch, so I can understand if you want to leave it this way.