Update notifications: only on security updates