If the HTTP_PROXY has a password, this will end up writing it to the yum.conf atm