Mostly rants to myself in the docs as I struggle to understand apt 'pin' vs apt 'hold' ... and why puppetlabs-apt fails to do EITHER of those successfully