def METHOD_NAME(host):
    """
    Ensures the 80securedrop config is correct. Under Ubuntu Focal,
    it will include unattended-upgrade settings. Under all hosts,
    it will disable installing 'recommended' packages.
    """
    f = host.file("/etc/apt/apt.conf.d/80securedrop")
    assert f.is_file
    assert f.user == "root"
    assert f.mode == 0o644
    assert f.contains('APT::Install-Recommends "false";')
    assert f.contains("Automatic-Reboot-Time")