Installs an APT pinning entry to enable OS patches.