add a script to detect changes in /etc