check_packages should return CRITICAL for outstanding security updates