debian-updates: only manage aliases on pre-bullseye hosts
Although not strictly related, I found this to be the simplest solution as I expect modern hosts (bullseye and up) to have a ansible-managed mail setup. However, if you prefer I can change this to a separate variable.