An XCCDF Rule
/etc/kubernetes/kubelet/kubelet-config.json
$ sudo chgrp root /etc/kubernetes/kubelet/kubelet-config.json