The following /etc/dpkg/dpkg.cfg settings are useful when you have scripted apt-get to do automatic security updates:
# Choose the default action regarding conffiles
force-confdef
# If no default, keep the old conffile
force-confold
This will prevent an update from aborting because the local version of the conf file differed from the package maintainer's version and no user input was available.