"Connection reset by peer" when isntalling software in templateVMs

This includes a clean install of a fedora (minimal) template vm.
qubes.UpdatesProxy appears sane.
tinyproxy is running in the sys-net vm