Feature/security updates

We wanted more sane security update policy for SmartOS (this approach is much faster and safer than doing a `pkgin full-upgrade` on every Chef run.