In a way they're already doing that with kernel source; the actual broken-out patches applied to the kernel are only available to customers and they're contractually obliged not to distribute them otherwise their contract will be terminated and they'll lose access to support, software and security updates and the right to run RHEL at all.