Add unattended-upgrades to base role