Check resource_tags value before using it in ec2_vpc

Fixes #7024
docker.client.APIError has moved to docker.errors.APIError

see https://github.com/dotcloud/docker-py/commit/18d4db09ecc79cef49830fa2c28c5e99dd02be42
apt_key: fix key lookup for 64 bit key ids

Fixes #7018 by extending `all_keys` to work with either short or long keys.

Also removes the ununsed method `key_present`.
Merge pull request #7029 from mattjbray/docker-api-error

docker.client.APIError has moved to docker.errors.APIError
Only update submodules when recursive is true
Make sure a default allow out rule exists if no other egress rules do

Fixes #7027
Fixing expectations in test_dir_inventory_groups_for_host
hint to install python-ssl on redhat systems
Merge pull request #7044 from 42wim/devel

hint to install python-ssl on redhat systems
docker: send 1.10 params if docker-py is new enough version
docker: exclude 'entrypoint' from comparing 'command' param with containers

The JSON the Docker API returns includes the container's ENTRYPOINT value (if it has one) with the 'Command' value. So instead of checking if `container['Command'] == module.params['command']`, we just check that `container['Command'].endswith(module.params['command'])` so the entrypoint won't affect a container being properly classified as matching the module params or not.

Also I refactored a super-long `if` statement into some temporary variables - I did it to help me figure out what was going wrong, and then it makes the code more readable so I kept it.
Honor ansible_private_key_file for delegated hosts

If a delegated host is not found in the inventory specified
private_key_file for primary host was not used.

This allows running playbooks without having to define any inventory at
all and to use the same ssh private key for both primary host and
delegated one.
Merge pull request #2 from taylorbarstow/inventorytree-tests

Adding unit tests for host groups with inventory dir
Adds support for VPC subnets to ELB
module docker_image - default tag latest

Fix constant rebuild of image if no tag specified.
Determine selinux context for NFS mount points correctly

Fixes #7009
Fix for https://github.com/ansible/ansible/issues/7054 - when renaming an instance and waiting for the change to occur, force result.id to the name of the new instance so the subsequent call to get_current_resource succeeds.
Make sure umask is set restrictively before creating any vault files
Fix #7057 missing False default for vars_prompt

The test for default should be "is not None" since a boolean value of
False is a valid value.

See discussion at:
  https://groups.google.com/forum/#!topic/ansible-project/oc1_zE-FnyI
Updating changelog/releases/packaging for 1.5.5 release