[PATCH 1/3] OVAL signoff for template_permissions