[PATCH 09/22] OVAL signoff + remediation