also harden /boot

Signed-off-by: Martin Schurz <[email protected]>

molecule/os_hardening_vm/converge.yml

@@ -15,6 +15,7 @@
     os_auth_pam_passwdqc_enable: false
     os_auth_lockout_time: 15
     os_yum_repo_file_whitelist: ['foo.repo']
+    os_mnt_boot_enabled: true
 
 # - name: wrapper playbook for kitchen testing "ansible-os-hardening"
 #  hosts: all