clean up openscap tailoring file

* Use remark element instead of xml comment to describe adjustments
* Fix id of Tailoring element
* Bump timestamp and version
configure /etc/login.defs to reduce SCAP tailoring file

We disable password auth, but setting defaults for password
in /etc/login.defs means we don't have to carry the exceptions
in the openscap tailoring file.
remove intermediate oval files to reduce image size