[PATCH 10/22] OVAL signoff + remediation: require_singleuser_auth