first cut at apt::unattended-upgrades recipe