xccdf_org.ssgproject.content_rule_file_groupowner_worker_kubeconfig
xccdf_org.ssgproject.content_rule_kubelet_enable_protect_kernel_defaults