we're using sudo elsewhere, if we were not needing sudo, we should
remove it everywhere.

I just upgraded emma to bookworm by mistake like this. Oops.

Maybe we should just clear out sources.list.d?

This upgraded emma to bookworm (partly) by mistake. Ouch.

Those are mostly minor things, and we're not fully in sync now, but it
looks better.

It's not the *label* that changed, apparently: that was and still is
`Debian-security`. The *codename* is different in the security archive now.