yum-security plugin was moved into core.