Give an option to allow updates via .onion
http://richardhartmann.de/blog/posts/2015/08/24-Tor-enabled_Debian_mirror/
This service is not redundant, it uses a key which is stored on the local drive, the .onion will change, and things are expected to break.
But at least this service exists now and can be used, tested, and put under some load