Isn't it better to leave this towards the bottom of the Dockerfile? That way, in the event that we need to change it, we can take advantage of the cache for all the previous "heavy" layers (such as the yum update/install)?