Can I update Java, OpenSSL or OpenSSH without interferring with the CSP/DCS agent?