Here's some bits from Dion Hulse detailing the process: https://make.wordpress.org/plugins/2015/03/14/plugin-automatic-security-updates/