Are Security Patches Applied Automatically?