SPI pins set in stone?

Yes, those pins are set in stone, if you want to use the hardware SPI peripheral.

You can always "bit bang" an SPI protocol using digitalWrite() functions (or lower-level writes to PORTx registers) to any pins that you want, but this will be much slower, of course.

--
The Rugged Circuits Yellowjacket: 802.11 WiFi module with ATmega328P microcontroller, only 1.6" x 1.2", bootloader