How is this file being updated on opnsense? Only by the @opnsense-team with updates rollout? Or must the user update this file themselves?