Hi,
Option 1: Move the CUA Master to another system & then move back when complete
Option 2: Remove child systems from CUA, perform admin manually for period of patching, re-connect when patching complete.
Which option you choose depends on how much admin overhead that CUA saves 'vs' effort of doing it.
Cheers