You should publish templates that can be updated. See ticket #398714. If you push a linux template that can never be updated using the standard Yum process, you are setting your customers up to have mission critical VMs fail on reboot. If there are changes that must be done to avoid kernel, Grub, Grub2, etc., updates or changes, make those part of your templates. Don't push a time bomb to your customers.