update instead of replace repositories - needs explicit expiration...