run security upgrades for new base images