diff --git a/roles/autofs/tasks/main.yml b/roles/autofs/tasks/main.yml
index 71dc38f..756d120 100644
--- a/roles/autofs/tasks/main.yml
+++ b/roles/autofs/tasks/main.yml
@@ -67,6 +67,7 @@
     block: |
       Match User root
           AuthorizedKeysFile .ssh/authorized_keys
+    marker: "# {mark} ANSIBLE MANAGED BLOCK (root user)"
   notify: restart sshd
 
 - name: move user cache from home directory to tmpfs