don't list Rocks repo for  possible security updates
add checks for file read
need to store RPMS for all "make roll" incarnations
store downloaded rpms in archive