They are, we're not doing anything super fancy, mostly just pushing lots of templated config files, ensuring that particular packages are installed, and that services like fapolicyd and auditd are running.