Give root permission to pip ansible task
Separate out policy from role in template