Comment 11 for bug 1570141

APT is not the cause of the issue (for some definition of cause). We switched to running the fetcher processes as an unpriviliged user last year in order to increase security. Client apps/directories need to be adjusted for that to work.