You can rely on config management if it pulls from a central service and that central service reports failures and hosts not checking in.