Decided to remove the downstream unit file since: 1. Maintaining stuff downstream sucks and upstream already provides an equivalent solution 2. The way we implemented the service was incompatible with SELinux (I found out about it the hard way)

While I was at it, I also cleaned up a bit the spec file and added a recommend to openssl, which is required to make module signing work.

Unfortunately I couldn't fix the problem of trailing modules/updates directories, but I think that the solution to that is much more involved and will require some aid from someone much more knowledgeable than me.

Let me know what you think

@breadyx_, @susnux: review reminder