The scope of the change is that it is only for *first time installation* rather than every time the system is built. So, the scope is very limited, and in most environments, will be handled by Puppet/Chef/Ops team. I've added a more detailed comment to clarify.