Upgrades can be restricted to the AOLserver and PG RPMs. OpenACS 4 includes a package manager and - after we get our shit together and have a proper repository set up here - folks will be able to grab new packages and updates and use the APM to upgrade or install datamodels, etc.