Chef: reintroduce unattended-upgrades; client to upstart