YaST2 can remove security updates without permission