R 3.4.2 with protection against apt-get upgrading by accident

Double pin R version

apt-get commands such as apt-get install curl will sometimes upgrade the version of R, which we want pinned