Status: OUT
RHEL 9 fleet security configuration can converge to desired state through automation alone — Ansible system roles deploy SELinux, firewalld, crypto, and audit policy, while the audit/compliance pipeline verifies convergence — without requiring coordinated maintenance windows for any security subsystem.