move to cloudfront.debian.net instead of mirrors.kernel.org for the public mirror