Users cannot (at least in v2004) allow Quality=Security Updates but disable Feature updates (=to next major release). Is this correct?