While fixing the issue I noticed something else. The postinstall of crypto-policies depends on the FIPS setting in /proc/sys/crypto/fips_enabled. I would assume that building in OBS/IBS this is always 0. Is that relevant for fips enablement during installation?