add "base" repo when downloading from "updates" repo
this will provide for hdownloads of no-security dependencies