tahoe-lafs package is in debian, switching package install to use that method, which solves the unauthenticated package problem
move classes to their own files for auto-loading layout
lint all the manifests