add nss* to yumexcludes