Ansible directly against Vagrant box
Configure sudo
Configure sshd
Simplify administration by passwordless sudo

And disallow login by password.