Ansible Vault support

Add the following options to the Ansible provisioner:
- ask_vault_pass
- vault_password_file

Requested here: #3241