It's unrealistic to disallow it in a decentralized repository environment, since the repositories are too inter-dependent. So we assume that images deriving from this one will call 'cave sync' early in case they add repositories.