unattended upgrades - signed pkgs