by removing the list of paths to search, are you envisioning that  in operation people would change the `secure_dir` variable in the `group_vars/all` file?  I kind of understand that these putting search paths everywhere is ugly, but I wish we could use the repo as is in actual operation.  

Maybe the answer is to use --extra-vars on the command line to override?  Let me check if this works with variable precedence.  If it works I think we should probably add it to the readme.