- dns: always triggers a refresh if "serial" not set for the zone
- Fix or remove openvpn_wrapper
- Consider using puppetlabs/apt for providing backports (no stable support for wheezy on 1.2):
- Consider the need of update_augeas for squeeze, since it overlaps with augeas