Ansible now has recommendations for handling an existing apt lock, which may be more elegant than our current methods: https://github.com/ansible/ansible/pull/73079