We're going to try out apticron, but we don't want to know about every package that could be updated -- only the security / critical updates. How do we configure apticron to do this?
PS -- yes, we are subscribed to the Debian security announcement list.