Just applied to /etc/profile.d/ to all SSH servers in my team. I also added some conditionals so that it only runs on interactive shells, doesn't run in sudo -i or tmux/screen, and it only runs once per day per server.