Bug 906785: use DNS round-robin to make apt resilient to single-master failures; r=rail