Redmine#4202: special apt method to avoid network updates

see https://cfengine.com/dev/issues/4202

Ensures `apt-get update` won't be called.

A class exclusion in the `apt_get` body doesn't work.  See docs for `apt_get_noupdate`.