Currently isar expects an anonymous apt repository to be able to fetch custom debian package feed. A mechanism that can use `https://manpages.debian.org/testing/apt/apt_auth.conf.5.en.html` is missing.