add NIST 800-53 compliance enforcement

[barryking93]

this is a GIGANTIC can of worms, but we're throwing it on the board anyways https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final

relevant (currently untracked) prerequisites:

• apparmor support
• selinux support
• ability to use grep/sed/inifile module to look for specific config variables in a given file