Host system/OS and packages, updates, and secure configurations question