How can I disable automatic OTA updates on a Nexus device on Marshmallow?
Rename /system/etc/security/otacerts.zip to otacerts_bak.zip.

This will prevent it from communicating with the OTA update server.