Manual changes always will be detected and dealt with, interactively, as is today with the debian package configurator. It's just one of many conditions for which policies can be put into code.