don't remove unattended-upgrades
add autoupdate to basics, but disable it by default