RHEL7 grub2 kernel version restriction

Question

I was tasked to restrict all previous kernels on RHEL7. I was told this can be done by simply removing the --unrestricted flag on all entries in /etc/grub2-efi.cfg