bin/heat: Protect changes to !s against running dnf.