description: >
    Implement to specify a restricted mode of operation.

properties:
    - name: RestrictionMode
      type: enum[self.Modes]
      description: >
          The restriction mode.

enumerations:
    - name: Modes
      description: >
          Possible modes of restriction.
      values:
          - name: None
            description: >
                No restriction.
          - name: Allowlist
            description: >
                Allow, only if in the allowlist.
          - name: Blocklist
            description: >
                Prevent, if in the blocklist.
          - name: Provisioning
            description: >
                Indicate that system is in provisioning mode and all commands
                are allowed in system interface in both pre and post BIOS boot.
          - name: ProvisionedHostAllowlist
            description: >
                Commands in the allowlist will only be executed through system
                interface after BIOS POST complete. All KCS commands are
                supported before POST complete.
          - name: ProvisionedHostDisabled
            description: >
                Commands through system interface are executed only till BIOS
                POST complete notification, after which system interface
                commands are blocked (except BIOS SMI based ones).