Only upgrade safe packages automatically through ansible