Could we add a `changed_when: False` to these `getent` commands?

That way, these tasks won't show up as changed on every run, which increases
visibility of unexpected changes.