Question, how does this work for stuff like Heartbleed? Do you have to download a diff for every single app that uses OpenSSL? Or is it smart enough to grab one copy of the new library? For that matter, is this going to mean you need to wait for each application to get a new version of openssl in it's "package"?