Is there an option or can i set some alias in a way that i run yum update however in the background it fires yum update -y --security on RHEL ?

Issue

We have an environment with redhat 6.4 servers in it and the client doesnot need to update its version. However, we have to patch the servers as per monthly patching policy as agreed with the client.

1. Using subscription manager is not our case.
2. Version lock also not supported
3. Another Solution that we can try is excluding the redhat-release package from being updated by excluding it under /etc/yum.conf. But not sure if thats a good idea.
4. we finally tried yum update -y --security which could be a good solution in this case.

Now my question is ..

Is there an option or can i set some alias in a way that i run yum update however in the background it fires yum update -y --security ?