I'd rather move openssl-devel and openssl-perl to smeos. The rational is that pushing our custom openssl build into smeos, we override the one provided by upstream. So, anyone who installed openssl-perl, or openssl-devel (either manually or through a dependency) will get an error during a simple yum update, and they have to guess which repo they should enable to fix that (smecontribs or smedev), while the initial installation was done with only the default repo enabled.