- up to patchlevel 11 (including broken completion fix)
- s/http/https/ in patchset source (no md5 digests for official patches
  fetched from original source, so at least https for minimal security)