Secured kickstarts based on CIS Security Benchmarks