Use proper guard block for update script

* log the number of updates to install
* add a timeout (default to 2 hours, it used to be 1 hour by default)