No real choice but to do it now given openssl-1.1 is masked.
Agreed.
x86 done
amd64 done
ppc done all arches done