Extend pm-updatestatus tests. Test Drupal core, and --security-only option.