lock apt version 1.7.0 in berksfile to not break older chef clients