Checking for them is generally a waste of time these days.
We also now default to applying security updates on devstacks and
we do them in production.  We may enable them everywhere in a future
release, but that will require more updates.