diff --git a/roles/lmn_mount/tasks/main.yml b/roles/lmn_mount/tasks/main.yml
index 9d26510..586ed79 100644
--- a/roles/lmn_mount/tasks/main.yml
+++ b/roles/lmn_mount/tasks/main.yml
@@ -11,6 +11,7 @@
 - name: Configure pam_mount
   blockinfile:
     dest: /etc/security/pam_mount.conf.xml
+    marker: "<!-- {mark} ANSIBLE MANAGED BLOCK" -->
     block: |
       <volume
         fstype="cifs"
@@ -52,7 +53,7 @@
   ansible.builtin.replace:
     path: /etc/security/pam_mount.conf.xml
     regexp: '^(<logout wait="0" hup="no" term="no" kill="no" />)$'
-    replace: '#\1\n<logout wait="1000" hup="yes" term="yes" kill="yes" />'
+    replace: '<!-- \1 -->\n<logout wait="1000" hup="yes" term="yes" kill="yes" />'
 
 - name: Kill all user processes on logout
   ansible.builtin.lineinfile: