Questions about OSCAP for NIST Compliance checking