add automatic security upgrades via apt