I guess I assume you wanted to use the “com_redhat_oscap” addon in the kickstart file.
That is how I harden my machines with the OpenSCAP guides anyway. These .ks files looks like some handywork by someone else. Any reason to not use the com_redhat_oscap addon?