Force Macs to run Xprotect updater through terminal to get latest NTPD security patch
Check out this post at macops.ca.

Using:

/usr/bin/sudo softwareupdate --background-critical


seems to be the answer.