ansible playbook shouldn't update OS packages