preconfigured preference for what to install?

[dnmvisser]

At a high level I usually want to auto install security-only update, or everything.
That comes down to setting unattended_origins_patterns to either this:

unattended_origins_patterns:
  - 'origin=Debian,codename=${distro_codename},label=Debian-Security'
  - 'origin=Debian,codename=${distro_codename}-security,label=Debian-Security'

or this:

unattended_origins_patterns:
  - 'origin=Debian,codename=${distro_codename},label=Debian-Security'
  - 'origin=Debian,codename=${distro_codename}-security,label=Debian-Security'
  - 'origin=Debian,codename=${distro_codename},label=Debian'
  - 'origin=Debian,codename=${distro_codename}-updates'

This works but it's not that intuitive to see what goes on without comments.
I've set up some helper vars locally:

unattended_origins_patterns_map:
  security:
    - 'origin=Debian,codename=${distro_codename},label=Debian-Security'
    - 'origin=Debian,codename=${distro_codename}-security,label=Debian-Security'
  everything:
    - 'origin=Debian,codename=${distro_codename},label=Debian-Security'
    - 'origin=Debian,codename=${distro_codename}-security,label=Debian-Security'
    - 'origin=Debian,codename=${distro_codename},label=Debian'
    - 'origin=Debian,codename=${distro_codename}-updates'
unattended_origins_patterns: "{{ unattended_origins_patterns_map[unattended_upgrade] }}"

With these "precooked" configs, I am now able to simply set a single string variable:

# What to auto install: 'security', or 'everything'.
unattended_upgrade: security

This seems to work well. Could it be an idea to include such a construct in this role?