Install group-specific packages

Also add some useful ones to all machines:
- htop
- tree
Enable automatic security updates