>And then the whole thing is really terrible security theater as you are technically out of certification if you apply any non-inspected updates. FedRAMP now p

>And then the whole thing is really terrible security theater as you are technically out of certification if you apply any non-inspected updates. FedRAMP now prefers to use non-certified updates to been certified but vulnerable. Especially when fips module comes from company that has a "proven track record of obtaining certification"