What if you create a pre-sysprep image and then bring it back down every time you need to add patches. Then you rebuild the pre-syspreped image over itself after you update it, sysprep it and save that as your new image? You have to maintain 2 versions of the same image, but it seems to me that should work.