Baseline compliance content in SCAP formats