Add explicit Debian version, so we can more tightly control updates