groups:
- network_ssl
name: openssl
packages:
- openssl
rules:
- only_allow_dod_certs
- only_allow_specific_certs
