add must-have APT helpers (for sid)
prevent packages being upgraded unintendedly
fix task ordering