Make it possible to have unattended-upgrades install security updates

Instead of doing the complicated things we were talking about, I've decided running updates at night would work well enough.

We normally configure the timezone properly anyway. Since we set Persistent=false, updates shouldn't run at boot if a machine wasn't up at 03:00.

Closes: #77 (closed)

To be merged with ansible-inventory!73 (merged)