XCCDF: using value references in rule description