Per our discussion in Edinburgh, we probably want to tighten up the list of licences from just "OSI approved".