#4 and #5 highlighted some gaps we have around testing of FIPS compliance. We should figure out how to automate this check so as to not be blindsided in future.
Refer to https://github.com/openshift/check-payload
This issue may need to be split up into smaller tasks.