Well, shot in the dark here, but is the order in which you specify packages significant? E.g. first you say "exclude openssh," but then you say "oops, install openssh after all (via @ text-internet)." ...