ensure ppas happen before packages

fixes stuff like a redis upgrade from the chris-lea/redis-server ppa