Today all of canonical and Azlinux sec packages arrive via Sec patch channel. This feature aims to support other sec patching options notably for ContainerD and kubelet etc.