the need of "Offline Updates"

[DJ Delorie]

> But, e.g. if openssl is updated for security issues, all dependent
> services need to be restarted. If not, you're still e.g. vulnerable.
> That can't be your wish.

Ah, but if sshd is restarted in the middle of the update, and you
ssh'd into the machine to do the update, it kills the install halfway
through and leaves you with an unusable system until you log in on the
console, clean up the rpm database, fix ssh, and restart it all.  DAMHIKT.