added a validate role that would only be run when running non-staging or...

... development playbooks.

This role verifies that the development/testing gpg keys, ossec alert email address, and sasl credentials are not used for production
Which key file is this? Is it stored in the source tree?