merged ansible upstream + vault changes for VaultGPG