local.caa_download: checking CIS variables