Description of problem:
When deploying HostedEngine and using OpenScap, when the package 'gssproxy' is removed from HostedEngineLocal it removes:
~~~
Removing:
 gssproxy                                           x86_64  0.8.0-19.el8                                  @anaconda         263 k
Removing dependent packages:
 nfs-utils                                          x86_64  1:2.3.3-46.el8                                @anaconda         1.5 M
 ovirt-engine                                       noarch  4.4.9.5-0.1.el8ev                             @koji-override-0   38 M
 ovirt-engine-setup                                 noarch  4.4.9.5-0.1.el8ev                             @koji-override-0  671  
 ovirt-engine-setup-plugin-ovirt-engine             noarch  4.4.9.5-0.1.el8ev                             @koji-override-0  776 k
~~~



Version-Release number of selected component (if applicable):


How reproducible:
100% Customer is seeing, and has been verified in the lab

Steps to Reproduce:
1. Deploy RHVH with security profile
2. Deploy Self Hosted engine
3. Yes to openscap

Actual results:

The deployment will fail as engine setup is not installed:
~~~
2021-12-21 13:55:18,532-0500 INFO otopi.ovirt_hosted_engine_setup.ansible_utils ansible_utils._process_output:112 TASK [**FILTERED**.rhv.engine_setup : Install oVirt Engine package]
2021-12-21 13:55:22,246-0500 DEBUG otopi.ovirt_hosted_engine_setup.ansible_utils ansible_utils._process_output:106 {'msg': 'Failed to install some of the specified packages', 'failures': ['No package ovirt-engine available.'], 'results': [], 'rc': 1, 'invocation': {'module_args': {'name': ['ovirt-engine'], 'state': 'present', 'allow_downgrade': False, 'autoremove': False, 'bugfix': False, 'disable_gpg_check': False, 'disable_plugin': [], 'disablerepo': [], 'download_only': False, 'enable_plugin': [], 'enablerepo': [], 'exclude': [], 'installroot': '/', 'install_repoquery': True, 'install_weak_deps': True, 'security': False, 'skip_broken': False, 'update_cache': False, 'update_only': False, 'validate_certs': True, 'lock_timeout': 30, 'conf_file': None, 'disable_excludes': None, 'download_dir': None, 'list': None, 'releasever': None}}, '_ansible_no_log': False, 'changed': False, '_ansible_delegated_vars': {'ansible_host': '192.168.222.225', 'ansible_port': None, 'ansible_user': 'root', 'ansible_connection': 'smart'}}
2021-12-21 13:55:22,347-0500 ERROR otopi.ovirt_hosted_engine_setup.ansible_utils ansible_utils._process_output:110 fatal: [localhost -> 192.168.222.225]: FAILED! => {"changed": false, "failures": ["No package ovirt-engine available."], "msg": "Failed to install some of the specified packages", "rc": 1, "results": []}
~~~

While configuring Openscap for bootstrap, it needs to remove several packages that do not meet this security protocol.  The issue is that when removing gssproxy, it removes 'rhvm'

Expected results:
When preparing for openscap, need to prevent the removal of the dependencies.  


Additional info:

The current workaround is to pause the deployment prior to engine-setup, add the engine repos, yum install rhvm, and finally remove the individual rpm package for the deployment to continue.