Anatomy of a Cloud-Service Security Update