vars_files belongs in provisioning only