Since the container images we're using as a base for the build system only contain stable packages, setting ACCEPT_KEYWORDS to allow unstable packages globally can cause a lot of rebuilds and potentially break things. Instead, we only set ~arch for the packages we actually need recent versions on the host. This does not affect packages installed in the target root, of course.