[OS-BUILD PATCH 0/16] redhat: rework IMA/EVM config opts