CIS hardening support in Container-Optimized OS from Google