How to configure a CCS-VM scan template to check for 5 specific patches