xccdf_org.ssgproject.content_rule_kubelet_enable_protect_kernel_defaults