Protect wsus-updates with a guard file

[achamo]

• We are using updates group and the updates are frozen in each updates group
• Running the updates each time Chef converges is not required
• We will run the updates only one time when the server is installed

[Annih]

Ok we are doing that internally.