boxcar: apt proxy is user controlled