Promote oscap_path_to_xslt to privileged.
Avoid using oscap_apply_xslt.
Use exported XCCDF dom to generate HTML report.