So my test case for the last commit was one match statement,
rhos-11 uses two, Ansible interprets "insert before" as
inserting before the *second* match....
https://github.com/ansible/ansible/issues/20582
Change-Id: I450f4c880bcabfc2a6025130608f5dc6c38eb43f