After setting up OES2, and configuring for customer center, ZMD gets a
huge list of stuff to patch.

Is there an easy way to tell it to just select the security stuff and
patch that first?

I've only been able to manually click a ton of checkboxes to get it to
do that.