New post: use PGP for the Ansible vault