(In reply to Petr Vorel from comment #3) I guess that the KVM payload code trips some safety check in rpmbuild. We should turn off that check.