use builtin ansible-managed system. This allows for easy modification…

[jakob1379]

This allows for easy modification and is backwards compatible.

By default, it will say "managed by Ansible" but can be customized a lot more in the ansible.cfg e.g. my own

# ansible.cfg

[defaults]
ansible_managed = This file is maintained by Ansible - ALL MODIFICATIONS WILL BE REVERTED.%n
  template: {file}
  date:     %Y-%m-%d %H:%M:%S
  user:     {uid}
  host:     {host}

This improves traceability by letting anyone see who and from what system