verification: restore original header :-)

example/cmd_sops.sh

@@ -18,3 +18,11 @@ set -x
 # ../bin/update_sops.sh -k "${keys_dir}" -c "${sops_cfg_dir}" -s "${secrets_file}" "${secrets_file}"
 # TEST: induce error: invalid file
 # ../bin/update_sops.sh "${secrets_file}" -s non_existing_secrets.yaml
+
+# Special Case: Add caveat header
+cat <<EOM > .sops.yaml.tmp
+# PURPOSE: BLUEPRINT for .sops.yaml config
+# CAVEAT: DO NOT USE THIS FILE AS-IS in another project; copy it and remove the unauthorised users
+$( cat .sops.yaml )
+EOM
+mv .sops.yaml.tmp .sops.yaml