manage apt::holds in hiera, like apt::sources