Most Cisco config drift detection drowns in false positives. Here's how to normalize diffs, pick three baselines, and remediate with a rollback timer.