More and more government agencies (.i.e. Federal, state, and local) are using Atlassian products. NIST SP800-53 rev 4 AC-8 requires systems to display to a user prior to logging into it certain requirements. This needs to be displayed on the login page before the user logs into the system and the act of logging into the system is consent by the user to follow the "rules".
I have researched and found the only way seem to be to de-compile the jira-gadgets-plugins jar, modify the login.soy, and perhaps a few other things, recompile the jra file and replace the original with the updated archive, then restart the application. This seems a laborious and potentially dangerous way to complete this requirement for every patch or upgrade across the different project. The Atlassian Cloud products may have addressed this but are the standalone products intending to address this as an enhancement?