We've had a few issues (like #3653) where new fog versions can change in slightly incompatible ways, causing CRs to stop working. Because we have no tests covering this area and usually build RPMs on each release, we can bump it each time we need a new feature. Currently when we rebuild stable packages for Debian or users on source installs, it's pulling in the latest version.