Use :install and not :upgrade for installing packages

As agreed during a community call, we want to use :install to allow
upgrades being controlled instead of automatically installed.