Move the update of galaxy to a script, to avoid a potential
attack on ansible.cfg ( since it read it from $PWD even when run with
sudo )