add 'automatic security updates' script