allow optional unattended upgrades