Turn on always-update on apt

This shaves a good 15 seconds off provisioning.