Take advantage of Ansible's password lookup variable

In Ansible 1.2 the password lookup variable makes it easy for Ansible to
generate and store passwords for us. Get rid of vats/secrets.yml and make
use of this feature.