Is it safe? How compliance and scanning fit with Config Management