description: >
    Implement to specify a restricted mode of operation.

properties:
    - name: RestrictionMode
      type: enum[self.Modes]
      description: >
          The restriction mode.

enumerations:
    - name: Modes
      description: >
        Possible modes of restriction.
      values:
        - name: None
          description: >
            No restriction.
        - name: Whitelist
          description: >
            Allow, only if in the whitelist.
        - name: Blacklist
          description: >
            Prevent, if in the blacklist.
        - name: Provisioning
          description: >
            Indicate that system is in provisioning mode
            and all commands are allowed in system interface
            in both pre and post BIOS boot.
        - name: ProvisionedHostWhitelist
          description: >
            Commands in the whitelist will only be executed
            through system interface after BIOS POST complete.
            All KCS commands are supported before POST complete.
        - name: ProvisionedHostDisabled
          description: >
            Commands through system interface are executed only
            till BIOS POST complete notification, after
            which system interface commands are blocked (except BIOS SMI
            based ones).