AptUpdate has to explicitly depend on WritePreferences
Added pip_install plugin

configuration is like

"pip_install": {"packages": ["a_package", "another_package==1.0.1"]}

Installs build-essential and python-dev.