Add ability to hold packages explicitly, fix error with kernel install

install/hold-list can be used to define packages which must be held during
apt-get install. This also fixes the problem of a generic kernel being
installed that is newer than the lowlatency one, resulting in broken
/vmlinuz and /initrd.img symlinks when it is removed again.