Ah yes I agree, I've had the most luck with the above method if I block network connectivity to prevent automatic updates. But thats not always possible / you have to give up many other features potentially.