Compute Engine explained: Best practices for OS updates at scale