Manifest for unattended security updates