Create a custom Software Update Agent configuration policy and apply it to just those servers. Then, create a schedule to install updates "Once" on 1/1/2050. Or, choose whatever date you would like - it just has to be some time in the future. This will give your servers a "valid" config policy and allow you to install the updates manually by using the 'Start software update cycle' link...