Prior to the actual scans being run, and after workloads have been spun down, work with the compliance (or security) team(s) to do a dry-run of the conmon reporting to ensure Kessel services are not reported.