{{ ansible_managed | comment }}
# disable core dumps for setuid programs
fs.suid_dumpable = 0