usage: apply-hardening --profile PROFILE [--runtime-remediate] [--sysroot SYSROOT]

  Apply system hardening measures to a directory tree.

    options:

      -h | --help               show this help text
           --profile PROFILE    which set of hardening measures to apply,
                                only valid profile currently is: cis-level-1
           --runtime-remediate  restart services, reload configuration
           --sysroot SYSROOT    filesystem root of the system to harden,
                                defaults to /