If you use isar-cip-core downstream the root user in kas-cip.yml can set the root password in a production image. Avoid this by moving the user and password to cip-core-image.
Should we rename the cip-core-image to cip-core-image-demo to clarify the indented use?
cip-core-image-security now requires cip-core-image as base. We could move the content of cip-core-image-security to a include to fasilitate the usage downstream.