gentoo-server-config/package_mask.conf.d/binhost.conf

# mask all non-binhost packages
*/*::gentoo
*/*::libressl