Normalize CVSS authentication 'single_instance' to 'single', per CVSS 2 specification