Move hosts to hosts.example so that we can easily define the ssh port.
Ignore vault-passwd.txt and any word containing `private`.
Add encrypted password, updated readme.