I think you might want to add here:

   require => Class['site_apt::preferences::obfsproxy']

Otherwise, obsproxy might get installed before it is pinned to backports. Micah, is my thinking here correct, or is that not needed?