I'm not sure that having auto-upgrade run at the same level as auto-config is sensible - what are the interactions if the auto-config package gets an upgrade? Ensuring sequential operation would seem safer.