OPSWAT compliance

* Refactors the OPSWAT template
* Creates the basics for adding compliance configuration to the provisioners in the admin GUI
* Adds compliance configuration in the admin interface for OPSWAT
Does it make sense to do multiple calls to the opswat service to get the device info for both verify_compliance and  validate_mac_in_opswat.
I would recommend to call get_device_info then pass the device info to verify_compliance and  validate_mac_in_opswat.
So to avoid the multiple calls to the opswat service.
Unless there is a compelling reason to do so call each time.