I think this should be silentRoot or rootWithoutException, otherwise the upgrade can fail during the postinst and leave APT in a broken package status if that fails (for example if ddclient is not running...)