Since this runs omnibus updater, pin back chef-client there too