Configure unattended upgrades appropriately

Take from GOV.UK puppet. Picked up the ITHC that we didn’t appear to be
installing things in the background that we could do.