Update 1 vm at a time; else entire cluster drops